react-pdf
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves processing data to generate documents, which inherently presents a surface for indirect prompt injection if untrusted content is included in the PDF.\n
- Ingestion points: External data or user input interpolated into React components within rendering scripts (e.g., SKILL.md, my-document.tsx).\n
- Boundary markers: No specific delimiters or instructions to ignore embedded commands are used in the provided examples.\n
- Capability inventory: The skill uses @react-pdf/renderer's renderToFile capability to write files to the system.\n
- Sanitization: There is no mention of sanitizing or escaping content before it is passed to the PDF rendering components.\n- [DYNAMIC_EXECUTION]: The skill uses the tsx tool to execute TypeScript and JSX code directly. This involves runtime execution of scripts that may be generated or modified during the agent's operation.\n- [COMMAND_EXECUTION]: The instructions include shell commands for setting up the environment (npm and pip install) and for processing PDFs (pdftoppm), which are standard utilities for these tasks.\n- [EXTERNAL_DOWNLOADS]: The skill provides a workflow for downloading font files from external sources using curl. These URLs are sourced from a local metadata file (google-fonts.txt).
Audit Metadata