pdf-reader
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted PDF documents, which constitutes an attack surface for indirect prompt injection where malicious instructions could be embedded in the document text or metadata.
- Ingestion points: PDF documents provided for extraction and analysis (SKILL.md).
- Boundary markers: The skill instructs the agent to 'Clearly distinguish between exact text extraction and your interpretation or summary', which provides a logical boundary but does not include explicit instructions to ignore embedded directives.
- Capability inventory: The skill references tools for text extraction and OCR, including Tesseract and pdf2image.
- Sanitization: There is no evidence of specific sanitization or filtering protocols to prevent the agent from following instructions found within the processed PDFs.
Audit Metadata