pdf

Pass

Audited by Gen Agent Trust Hub on Mar 18, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides Python scripts and command-line examples for using standard PDF utilities such as qpdf, pdftotext, and pdfimages. These tools are used for document transformation and extraction within the local environment.
  • [EXTERNAL_DOWNLOADS]: Skill documentation in SKILL.md and reference.md references the installation of trusted and widely-used PDF processing libraries including pypdf, pdfplumber, reportlab, and pytesseract. No downloads from unknown or untrusted sources are identified.
  • [REMOTE_CODE_EXECUTION]: scripts/fill_fillable_fields.py implements a runtime monkeypatch for the pypdf.generic.DictionaryObject class to resolve a specific formatting bug in version 5.7.0. This modification is transparently documented, limited in scope, and necessary for the correct processing of selection list fields.
  • [PROMPT_INJECTION]: The skill processes user-provided PDF documents for text and table extraction, which constitutes a standard surface for indirect prompt injection. The skill mitigates risks through explicit processing workflows and automated validation of bounding boxes in scripts/check_bounding_boxes.py to ensure accurate data entry.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 18, 2026, 12:04 AM