nutrient-document-processing

Pass

Audited by Gen Agent Trust Hub on Apr 3, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses curl to send documents to the document processing API endpoint at api.nutrient.io for conversion and manipulation.
  • [EXTERNAL_DOWNLOADS]: It references the official @nutrient-sdk/dws-mcp-server package from the npm registry for optional Model Context Protocol integration using npx.
  • [DATA_EXFILTRATION]: The skill transmits document content to the Nutrient service for its primary functionality, including OCR and data extraction. Nutrient is a well-known provider of document technology.
  • [CREDENTIALS_UNSAFE]: Instructions demonstrate the use of an API key via environment variables with a placeholder value (pdf_live_...) to guide users in safe secret management.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 3, 2026, 10:24 AM