minimax-pdf
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches necessary functional dependencies from established repositories. This includes
reportlab,pypdf, andmatplotlibfrom PyPI, andplaywrightfrom NPM. It also retrieves typography assets from Google Fonts (fonts.googleapis.com) at runtime via CSS imports. - [COMMAND_EXECUTION]: Automated shell commands are used for environment configuration and rendering components.
- Scripts such as
scripts/make.sh,scripts/render_body.py, andscripts/reformat_parse.pyutilizesubprocess.check_callto install Python packages viapipif they are missing from the system. scripts/render_cover.jsexecutesnpx playwright install chromiumto ensure the required headless browser is available for the PDF generation pipeline.- [SAFE]: The skill ingests data from external sources such as Markdown, PDF, and JSON files to perform its primary function of document reformatting. Analysis shows that these inputs are parsed into a local structured schema for rendering, rather than being interpreted as instructions for the agent, which mitigates indirect prompt injection risks.
Audit Metadata