readable-pdf

Pass

Audited by Gen Agent Trust Hub on Sep 12, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses curl to download PDF files from user-supplied URLs to the /tmp directory. This is used to prepare remote documents for local processing.
  • [COMMAND_EXECUTION]: The skill executes the pdfvision utility, a tool maintained by the author, to perform content extraction and page rendering. The instructions include commands for checking versions, installing the package, and running the extraction with various flags.
  • [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it processes data from external, untrusted PDF files.
  • Ingestion points: Documents downloaded from remote URLs via curl and local PDF files processed by pdfvision (SKILL.md).
  • Boundary markers: No explicit boundary markers or instructions are provided to the agent to treat the extracted content as untrusted data.
  • Capability inventory: The skill utilizes network access via curl and file system access via curl and pdfvision (SKILL.md).
  • Sanitization: No sanitization or filtering of the extracted text content is performed before it is added to the agent's context.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 12, 2026, 02:54 AM