skills/zocomputer/skills/generate-pdf/Gen Agent Trust Hub

generate-pdf

Warn

Audited by Gen Agent Trust Hub on Oct 24, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes shell commands to update the package manager, install system dependencies, and run the pandoc conversion utility.
  • [PRIVILEGE_ESCALATION]: The instructions include commands (apt-get install) that typically require administrative or root privileges to modify the system's software configuration and install persistent packages.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from Markdown files provided by the user, creating a surface for potential injection or extraction attacks.
  • Ingestion points: Reads content from the file path specified in <user's_markdown_path>.
  • Boundary markers: None identified; the agent is not instructed to ignore or isolate instructions embedded within the processed Markdown.
  • Capability inventory: Performs shell command execution (pandoc, xelatex) and file system writes (-o "<output_pdf_path>").
  • Sanitization: No sanitization or validation of the Markdown content or the provided file paths is described, which could allow for command injection or path traversal if variables are maliciously crafted.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 24, 2026, 12:16 PM