minimax-pdf

Pass

Audited by Gen Agent Trust Hub on Apr 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches typography resources from Google Fonts' official servers during the PDF cover rendering process. Automated dependency management scripts in the Python and shell files install required libraries (pypdf, reportlab, matplotlib, playwright) from public registries (PyPI and NPM) if they are not present.- [COMMAND_EXECUTION]: The skill uses Python's subprocess module within several scripts (fill_inspect.py, render_body.py, etc.) to execute system commands for automated dependency management. It also utilizes a shell script (make.sh) to coordinate the multi-stage document generation pipeline.- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface because it ingests and parses external data from user-provided Markdown files, PDFs, and JSON objects to generate document content. Ingestion points: Data enters the system through reformat_parse.py and fill_write.py. Boundary markers: The pipeline does not currently use specific delimiters or instructions to isolate user content from the rendering logic. Capability inventory: The skill can execute shell commands for dependency setup, write files to the local system, and perform network operations via Playwright. Sanitization: Input data is parsed for formatting markers but does not undergo validation to filter out potential natural language instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 15, 2026, 09:36 AM