nano-pdf
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to download and install the
nano-pdfpackage from PyPI, a well-known package registry. - [COMMAND_EXECUTION]: The skill executes the
nano-pdfcommand-line tool to perform text edits on PDF files. - [INDIRECT_PROMPT_INJECTION]: The skill processes natural language instructions to modify PDF content, creating a vulnerability surface where malicious content within a PDF could potentially influence the LLM used by the tool.
- Ingestion points: PDF file content and user-provided instruction strings in
SKILL.md. - Boundary markers: None specified in the usage instructions.
- Capability inventory: Invokes the
nano-pdfCLI tool for file system modifications. - Sanitization: No sanitization or input validation mechanisms are described for the processed PDF data.
Audit Metadata