skills/ortus-boxlang/skills/bx-pdf/Gen Agent Trust Hub

bx-pdf

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the install-bx-module and box install commands to install the bx-pdf module, which are standard package management operations for the BoxLang environment.\n- [COMMAND_EXECUTION]: The skill enables writing PDF files to the local file system through the filename attribute in the bx:document component and the fileWrite script function, which provides the agent with file system modification capabilities.\n- [EXTERNAL_DOWNLOADS]: The skill supports fetching content from external URLs using the src attribute in the bx:documentsection component. This allows the PDF engine to perform network requests to retrieve and render remote web content.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes content from local files and remote URLs to generate document output, which represents an injection surface if the ingested data contains malicious instructions.\n
  • Ingestion points: Data is retrieved from local paths using srcfile and from remote URLs using the src attribute in bx:documentsection.\n
  • Boundary markers: The documentation does not specify the use of delimiters or clear instructions for the agent to ignore any embedded directives within the retrieved HTML content.\n
  • Capability inventory: The skill possesses the ability to perform file system writes and execute network requests to external domains.\n
  • Sanitization: There are no mentioned mechanisms for sanitizing, escaping, or validating the ingested content before it is rendered by the PDF generation engine.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 09:47 PM