pdf-processing
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill uses established Python libraries (pdfplumber, pypdf, pdfrw) for PDF manipulation, which is consistent with its stated purpose of document extraction and form filling.
- [SAFE]: The utility scripts (analyze_form.py and extract_text.py) are mock implementations that do not perform any dangerous file system modifications, command execution, or network operations.
- [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection by processing external PDF files. Ingestion points: scripts/analyze_form.py and scripts/extract_text.py. Boundary markers: None. Capability inventory: The scripts do not possess dangerous capabilities like subprocess execution or network access. Sanitization: No content sanitization or validation is implemented for the extracted text.
Audit Metadata