kimi-pdf
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external PDF documents and HTML files, which serves as an ingestion point for potentially malicious instructions.\n
- Ingestion points: Document content is processed in
scripts/cmd_extract.py(text and tables),scripts/cmd_form.py(forms), andscripts/cmd_meta.py(metadata).\n - Boundary markers: Extracted text is wrapped in
[BEGIN_PDF_CONTENT]and[END_PDF_CONTENT]delimiters inscripts/cmd_extract.pyto help the agent distinguish content from instructions.\n - Capability inventory: The skill has the ability to execute shell commands (via
subprocess.runinscripts/cmd_convert.pyandscripts/compile_latex.py), write files to the local system, and trigger browser-based rendering via Playwright.\n - Sanitization: Text content is delimited, while table and form data are handled through structured parsing.\n- [EXTERNAL_DOWNLOADS]: The skill downloads and installs software dependencies from official package registries.\n
- The
scripts/pdf.shscript provides afixcommand that installsplaywrightvia npm andpikepdfandpdfplumbervia pip.\n - The
scripts/compile_latex.pyscript automatically attempts to install thepypdflibrary from PyPI if it is not present at runtime.\n - The
scripts/browser_helper.jsscript can trigger the installation of the Chromium browser via Playwright.\n- [COMMAND_EXECUTION]: The skill executes external command-line tools to perform its primary functions.\n scripts/cmd_convert.pyinvokesLibreOffice(soffice) to convert various office formats to PDF.\nscripts/compile_latex.pyinvokes theTectonicengine to compile LaTeX source files.\nscripts/pdf.shacts as a wrapper for executing various Node.js and Python-based utility scripts.\n- [DYNAMIC_EXECUTION]: The skill utilizes dynamic techniques to manage its execution environment.\nscripts/browser_helper.jsuses dynamic module loading (requirefrom computed paths) to locate theplaywrightdependency across various system directories.\n- The skill performs runtime compilation of LaTeX documents using the
Tectonicengine.
Audit Metadata