skills/thvroyal/kimi-skills/kimi-pdf/Gen Agent Trust Hub

kimi-pdf

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external PDF documents and HTML files, which serves as an ingestion point for potentially malicious instructions.\n
  • Ingestion points: Document content is processed in scripts/cmd_extract.py (text and tables), scripts/cmd_form.py (forms), and scripts/cmd_meta.py (metadata).\n
  • Boundary markers: Extracted text is wrapped in [BEGIN_PDF_CONTENT] and [END_PDF_CONTENT] delimiters in scripts/cmd_extract.py to help the agent distinguish content from instructions.\n
  • Capability inventory: The skill has the ability to execute shell commands (via subprocess.run in scripts/cmd_convert.py and scripts/compile_latex.py), write files to the local system, and trigger browser-based rendering via Playwright.\n
  • Sanitization: Text content is delimited, while table and form data are handled through structured parsing.\n- [EXTERNAL_DOWNLOADS]: The skill downloads and installs software dependencies from official package registries.\n
  • The scripts/pdf.sh script provides a fix command that installs playwright via npm and pikepdf and pdfplumber via pip.\n
  • The scripts/compile_latex.py script automatically attempts to install the pypdf library from PyPI if it is not present at runtime.\n
  • The scripts/browser_helper.js script can trigger the installation of the Chromium browser via Playwright.\n- [COMMAND_EXECUTION]: The skill executes external command-line tools to perform its primary functions.\n
  • scripts/cmd_convert.py invokes LibreOffice (soffice) to convert various office formats to PDF.\n
  • scripts/compile_latex.py invokes the Tectonic engine to compile LaTeX source files.\n
  • scripts/pdf.sh acts as a wrapper for executing various Node.js and Python-based utility scripts.\n- [DYNAMIC_EXECUTION]: The skill utilizes dynamic techniques to manage its execution environment.\n
  • scripts/browser_helper.js uses dynamic module loading (require from computed paths) to locate the playwright dependency across various system directories.\n
  • The skill performs runtime compilation of LaTeX documents using the Tectonic engine.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 12:32 PM