nano-pdf
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the
nano-pdftool from the official Python Package Index (PyPI) usinguvorpipduring the initial setup. - [COMMAND_EXECUTION]: Executes the
nano-pdfCLI utility to create or edit documents. This involves calling the binary via the shell with parameters and natural language instructions derived from user input. - [PROMPT_INJECTION]: The skill processes user-supplied PDF files, which represents an attack surface for indirect prompt injection.
- Ingestion points: Local PDF files accessed via the
nano-pdf editcommand. - Boundary markers: Instructions provided to the CLI are enclosed in double quotes within the command-line arguments.
- Capability inventory: Includes package installation capabilities (
pip,uv) and shell command execution for thenano-pdfbinary. - Sanitization: No explicit validation or sanitization of the PDF file content is described before it is processed by the CLI tool.
Audit Metadata