Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill leverages established Python libraries such as pypdf, pdfplumber, and reportlab, as well as JavaScript libraries like pdf-lib and pdf.js. These are standard tools for PDF processing and no suspicious use cases were found.
- [SAFE]: Command-line operations utilize poppler-utils (pdftotext, pdfimages) and qpdf, which are standard system utilities for document management. No dangerous command patterns or privilege escalation attempts were detected.
- [SAFE]: The provided scripts for form extraction and filling (e.g.,
extract_form_field_info.py,fill_fillable_fields.py) operate locally on the filesystem. They perform structured data processing using JSON and do not initiate any network connections. - [SAFE]: Instructional content in
SKILL.mdandforms.mdis focused on task execution and includes validation steps (e.g.,check_bounding_boxes.py) to ensure accuracy and prevent errors during PDF generation. - [SAFE]: No obfuscation, prompt injection attempts, or persistence mechanisms were found across any of the skill files or scripts.
Audit Metadata