remove-pdf-watermark
Pass
Audited by Gen Agent Trust Hub on May 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads and executes the
@pilio/clipackage from the NPM registry usingpnpm dlx. This is a vendor-owned resource provided by pilioai. - [COMMAND_EXECUTION]: The skill invokes the Pilio CLI through shell commands to perform PDF processing tasks and poll for results.
- [CREDENTIALS_UNSAFE]: The instructions require a
PILIO_API_KEYbut correctly specify that it should be sourced from the environment rather than being hardcoded or requested directly from the user in the chat session. - [PROMPT_INJECTION]: The skill processes external data (PDF files) which constitutes an indirect prompt injection surface.
- Ingestion points: External PDF files (e.g.,
./watermarked.pdf) are passed to the CLI tool. - Boundary markers: No specific boundary markers or instructions to ignore embedded commands within the PDF content are present.
- Capability inventory: The skill possesses command execution capabilities through
pnpm dlxand the@pilio/clitool. - Sanitization: There is no evidence of content sanitization or validation of the PDF file's internal data before processing.
Audit Metadata