literature-reader
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a local Python script (
extract_pdf.py) to perform PDF text and table extraction when built-in tools are insufficient. - [EXTERNAL_DOWNLOADS]: The skill instructs the installation of
pdfplumber, a widely recognized and well-maintained library for PDF processing, from the official Python Package Index (PyPI). - [INDIRECT_PROMPT_INJECTION]: The skill ingests content from external PDF documents provided by the user. While it establishes a structured analysis workflow, it lacks explicit boundary markers or instructions for the agent to disregard potential commands or adversarial text embedded within the processed documents. This is a common characteristic of document analysis tools.
Audit Metadata