timeline-pdf-notes
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes operator notes in PDF format from the
input/notes/directory. This creates a vulnerability where a maliciously crafted PDF could contain instructions aimed at manipulating the agent's parsing logic or subsequent actions. - Ingestion points: External PDF files processed from the
input/notes/folder. - Boundary markers: None identified; there are no explicit instructions to the agent to treat the PDF content as untrusted data or to ignore embedded instructions.
- Capability inventory: The skill utilizes
pdfplumberfor text/table extraction and writes the structured output to a local JSON file. - Sanitization: No evidence of content sanitization or validation was found in the instructions.
Audit Metadata