deep-reader
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a set of local bash scripts to coordinate the reading workflow. It relies on standard document processing utilities such as
pdftotext(via Poppler) andpandocto convert user-supplied document formats into a paged plain-text format for the agent to process. These operations are local and confined to the user-provided files and a generated workspace directory. - [INDIRECT_PROMPT_INJECTION]: By processing long-form external documents like PDFs and EPUBs, the skill interacts with untrusted data that could theoretically contain prompt injection attacks. The skill mitigates this risk through its multi-step architecture: it breaks documents into manageable segments, records observations in intermediate note files, and provides a
verify-quotes.shutility to mechanically validate the agent's syntheses against the original source text. - [DATA_EXPOSURE]: The skill creates and maintains a local directory (
<slug>-notes/) to store the coordinate-mapped source text and chapter-level notes. It does not access sensitive system paths, hardcode credentials, or perform any network operations, ensuring that the processed data remains within the local environment.
Audit Metadata