pdfkit
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard documentation and examples for using the
pdfkitlibrary for legitimate document generation tasks. - [INDIRECT_PROMPT_INJECTION]: The skill identifies an ingestion surface where untrusted data could be used to generate PDF content. It mitigates this risk by including a 'Guidelines' section that specifically instructs developers to sanitize and encode user input before using it in file paths, headers, or image sources.
- [COMMAND_EXECUTION]: Shell commands are restricted to standard package management operations (
npm install) for the required library and its TypeScript definitions. - [DATA_EXPOSURE]: File system access is limited to standard operations for PDF generation, such as reading local font files and writing the resulting PDF to a stream.
Audit Metadata