skills/zhihaoairobotic/clawphd/pdf2md/Gen Agent Trust Hub

pdf2md

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted PDF files through the pdf_to_markdown tool. Ingestion point: pdf_path in SKILL.md. Boundary markers: The skill does not define specific delimiters to isolate the converted text. Capability inventory: The tool performs file system writes to outputs/ and initiates network connections to fal.ai. Sanitization: No explicit filtering of the extracted text content is performed before presentation to the agent.
  • [COMMAND_EXECUTION]: The skill requires and executes external command-line utilities including mutool, pdf2svg, and the mineru (magic-pdf) suite for document parsing and vector graphic conversion.
  • [EXTERNAL_DOWNLOADS]: The skill depends on the external Python package clawphd-ai[autofigure] and uses the fal.ai cloud service for SAM3-based image segmentation and RMBG-2.0 background removal.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 11:09 AM