pdf-conversion-router
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted PDF data which represents an attack surface for embedded instructions.
- Ingestion points: PDF files (input.pdf) processed by conversion engines.
- Boundary markers: The instructions explicitly warn the agent to treat extracted text and links as untrusted data and never as instructions.
- Capability inventory: The skill uses CLI tools for document analysis and writes output to the local file system.
- Sanitization: It advises the agent to escape active content and preview extracted HTML in restricted environments.
- [COMMAND_EXECUTION]: The skill provides templates for shell commands using standard PDF utilities and the OpenDataLoader CLI.
- The commands are used for legitimate document classification and conversion tasks.
- It encourages local verification of tool help and configurations before use.
Audit Metadata