generate-pdf
Warn
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands to update the package manager, install system dependencies, and run the
pandocconversion utility. - [PRIVILEGE_ESCALATION]: The instructions include commands (
apt-get install) that typically require administrative or root privileges to modify the system's software configuration and install persistent packages. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from Markdown files provided by the user, creating a surface for potential injection or extraction attacks.
- Ingestion points: Reads content from the file path specified in
<user's_markdown_path>. - Boundary markers: None identified; the agent is not instructed to ignore or isolate instructions embedded within the processed Markdown.
- Capability inventory: Performs shell command execution (
pandoc,xelatex) and file system writes (-o "<output_pdf_path>"). - Sanitization: No sanitization or validation of the Markdown content or the provided file paths is described, which could allow for command injection or path traversal if variables are maliciously crafted.
Audit Metadata