meta-pdf-intelligence
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill demonstrates secure orchestration by using
xml_escapeboundary markers when processing user messages and external PDF content. It implements a strict synthesis hierarchy that prioritizes verbatim user excerpts over extracted data to prevent document-based prompt injection. - [PROMPT_INJECTION]: The skill mitigates indirect prompt injection via a mandatory evidence chain analysis. Ingestion points include user messages and external PDFs via
pdf-toolkit. Boundary markers includexml_escapeapplied to all external data interpolated into LLM steps. Capability inventory includes reading viapdf-toolkitand writing tomemory/pdf-intel.mdvia the restrictedmemory_savetool. Sanitization is enforced throughxml_escapeand length-limitingtruncatefilters throughout the pipeline.
Audit Metadata