The Agent Skills Directory

[PRIVILEGE_ESCALATION]: The skill provides instructions for the agent to install system software using the sudo command (e.g., sudo apt-get install poppler-utils tesseract-ocr qpdf). The use of elevated privileges for command execution requires user oversight.
[UNVERIFIABLE_DEPENDENCIES]: The skill instructs the installation of several external Python libraries (pypdf, pdfplumber, reportlab, pytesseract, pdf2image, pandas) and system packages. These are standard tools for the task but represent a dependency on external code sources.
[INDIRECT_PROMPT_INJECTION]: The skill possesses a potential vulnerability surface for indirect prompt injection as it is designed to extract and process text from untrusted PDF files. 1. Ingestion points: File reading code in SKILL.md including the use of pypdf.PdfReader and pdfplumber.open. 2. Boundary markers: Absent; there are no instructions to the agent to treat extracted content strictly as data or to ignore embedded instructions. 3. Capability inventory: The skill utilizes file system read/write access and shell command execution. 4. Sanitization: Absent; the provided code snippets do not implement sanitization or filtering of content extracted from PDF documents.

pdf