Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFE
Full Analysis
- [DYNAMIC_EXECUTION]: The script
scripts/fill_fillable_fields.pyperforms runtime monkeypatching of thepypdflibrary. Specifically, it overrides theDictionaryObject.get_inheritedmethod to correct a known issue with how selection list fields are handled in certain versions of the library. This is a documented bug workaround and is not used for malicious purposes. - [COMMAND_EXECUTION]: The skill provides several Python scripts (
scripts/extract_form_field_info.py,scripts/convert_pdf_to_images.py, etc.) designed to be executed by the agent to automate the PDF processing workflow. These scripts operate on local files provided as arguments. - [PROMPT_INJECTION]: The
forms.mdfile contains strong instructional language using terms like 'CRITICAL' and 'REQUIRED' to enforce a specific sequence of operations. These are workflow constraints intended to ensure accuracy in form processing rather than attempts to bypass security guidelines. - [DATA_EXPOSURE]: The skill is designed to ingest and process untrusted external data (PDF documents). While it extracts text and metadata, there are no instructions or mechanisms for exfiltrating this data to remote servers.
Audit Metadata