nano-pdf
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the execution of the
nano-pdfCLI tool to modify PDF files based on user-supplied operations. This is the primary intended behavior. - [EXTERNAL_DOWNLOADS]: The skill installs the
nano-pdfpackage from the Python Package Index (PyPI), which is a standard dependency for the tool's functionality. - [INDIRECT_PROMPT_INJECTION]: The skill has a data ingestion surface as it processes external PDF files.
- Ingestion points: Input PDF files (
input.pdf) provided to the CLI tool. - Boundary markers: No delimiters are specified to isolate the content of the PDF files from the agent's instructions.
- Capability inventory: Execution of shell commands via the
nano-pdfbinary as described in SKILL.md. - Sanitization: The skill relies on the underlying
nano-pdftool for parsing and does not provide additional content sanitization.
Audit Metadata