pdf-asset-extractor
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized network operations were detected in the skill instructions.
- [DATA_EXPOSURE]: The skill requires access to local file paths to ingest PDF documents for processing. While this involves reading from the local file system, it is restricted to the paths provided to the
ingest_documentsandparse_pdf_structuretools, which is consistent with the skill's stated purpose of document analysis. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data (PDF files) and transforms the content into Markdown and Base64 images for the agent's context.
- Ingestion points: PDF files via
ingest_documentsandparse_pdf_structuretools. - Boundary markers: None explicitly defined in the extraction instructions to isolate extracted text from system instructions.
- Capability inventory: The agent can read files and perform cross-document RAG queries via the
consult_knowledge_graphtool. - Sanitization: No specific sanitization or filtering of extracted PDF content is mentioned. A malicious PDF could potentially contain instructions designed to influence the agent's behavior when the content is retrieved.
Audit Metadata