pdf-to-docx
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external PDF files, which represent an untrusted data ingestion surface. 1. Ingestion points: The skill uses pdf2docx.Converter to read PDF files and pdf2image.convert_from_path for OCR workflows in SKILL.md. 2. Boundary markers: The example code snippets do not implement specific boundary markers or instructions to ignore embedded content within the PDFs. 3. Capability inventory: The skill demonstrates capabilities for file system read/write, directory creation, and execution of OCR tools via Python libraries. 4. Sanitization: There is no explicit sanitization of the text extracted from PDFs before it is saved to Word documents or logged.
- [EXTERNAL_DOWNLOADS]: The skill references standard Python packages available on PyPI and provides installation commands for pdf2docx and Pillow. These are well-known libraries appropriate for the skill's stated purpose of document conversion.
Audit Metadata