html-to-pdf
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill specifies the installation of the weasyprint library and its associated native system dependencies from public repositories.
- [COMMAND_EXECUTION]: The skill utilizes a Python script (scripts/render.py) to execute the rendering logic using user-supplied parameters.
- [DATA_EXFILTRATION]: The script supports reading from local files and fetching content from remote URLs to gather source data for PDF generation.
- [PROMPT_INJECTION]: The skill processes external, potentially untrusted HTML content, creating a surface for indirect prompt injection.
- Ingestion points: Source HTML provided via file path or URL to scripts/render.py.
- Boundary markers: Absent.
- Capability inventory: File read and file write operations performed by scripts/render.py.
- Sanitization: No explicit sanitization of input HTML or CSS content is performed before rendering.
Audit Metadata