skills/zircote/marketplace/pdf/Gen Agent Trust Hub

pdf

Pass

Audited by Gen Agent Trust Hub on Jul 13, 2026

Risk Level: SAFE
Full Analysis
  • [DYNAMIC_EXECUTION]: The script scripts/fill_fillable_fields.py performs runtime monkeypatching of the pypdf library. Specifically, it overrides the DictionaryObject.get_inherited method to correct a known issue with how selection list fields are handled in certain versions of the library. This is a documented bug workaround and is not used for malicious purposes.
  • [COMMAND_EXECUTION]: The skill provides several Python scripts (scripts/extract_form_field_info.py, scripts/convert_pdf_to_images.py, etc.) designed to be executed by the agent to automate the PDF processing workflow. These scripts operate on local files provided as arguments.
  • [PROMPT_INJECTION]: The forms.md file contains strong instructional language using terms like 'CRITICAL' and 'REQUIRED' to enforce a specific sequence of operations. These are workflow constraints intended to ensure accuracy in form processing rather than attempts to bypass security guidelines.
  • [DATA_EXPOSURE]: The skill is designed to ingest and process untrusted external data (PDF documents). While it extracts text and metadata, there are no instructions or mechanisms for exfiltrating this data to remote servers.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 13, 2026, 10:14 PM
Security Audit — agent-trust-hub — pdf