readable-pdf
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
curlto download PDF files from user-supplied URLs to the/tmpdirectory. This is used to prepare remote documents for local processing. - [COMMAND_EXECUTION]: The skill executes the
pdfvisionutility, a tool maintained by the author, to perform content extraction and page rendering. The instructions include commands for checking versions, installing the package, and running the extraction with various flags. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it processes data from external, untrusted PDF files.
- Ingestion points: Documents downloaded from remote URLs via
curland local PDF files processed bypdfvision(SKILL.md). - Boundary markers: No explicit boundary markers or instructions are provided to the agent to treat the extracted content as untrusted data.
- Capability inventory: The skill utilizes network access via
curland file system access viacurlandpdfvision(SKILL.md). - Sanitization: No sanitization or filtering of the extracted text content is performed before it is added to the agent's context.
Audit Metadata