pdf2md
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted PDF files through the
pdf_to_markdowntool. Ingestion point:pdf_pathinSKILL.md. Boundary markers: The skill does not define specific delimiters to isolate the converted text. Capability inventory: The tool performs file system writes tooutputs/and initiates network connections tofal.ai. Sanitization: No explicit filtering of the extracted text content is performed before presentation to the agent. - [COMMAND_EXECUTION]: The skill requires and executes external command-line utilities including
mutool,pdf2svg, and themineru(magic-pdf) suite for document parsing and vector graphic conversion. - [EXTERNAL_DOWNLOADS]: The skill depends on the external Python package
clawphd-ai[autofigure]and uses thefal.aicloud service for SAM3-based image segmentation and RMBG-2.0 background removal.
Audit Metadata