document-generation-pdf
Pass
Audited by Gen Agent Trust Hub on Mar 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security risks were identified within the skill's scripts or documentation. The implementation follows standard development practices for document automation and legal tech workflows.\n- [EXTERNAL_DOWNLOADS]: The skill correctly references and utilizes trusted, well-known libraries including 'pdf-lib', 'puppeteer', and 'docusign-esign'. It provides guidance for integrating with official cloud services like Amazon S3 and DocuSign using their established SDKs and APIs.\n- [COMMAND_EXECUTION]: The provided TypeScript utilities ('form_filler.ts' and 'document_assembler.ts') are designed as command-line tools for PDF manipulation. They perform necessary file system operations, such as reading templates and writing generated documents, which are essential for the skill's stated purpose.\n- [DATA_EXPOSURE]: The skill demonstrates secure handling of sensitive information by advising against plain-text storage and showing the correct use of environment variables ('process.env.PDF_OWNER_PASSWORD') for managing PDF encryption keys. It includes explicit warnings about the risks of storing sensitive legal or medical data unencrypted.
Audit Metadata