Pass
Audited by Gen Agent Trust Hub on Mar 18, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides Python scripts and command-line examples for using standard PDF utilities such as
qpdf,pdftotext, andpdfimages. These tools are used for document transformation and extraction within the local environment. - [EXTERNAL_DOWNLOADS]: Skill documentation in
SKILL.mdandreference.mdreferences the installation of trusted and widely-used PDF processing libraries includingpypdf,pdfplumber,reportlab, andpytesseract. No downloads from unknown or untrusted sources are identified. - [REMOTE_CODE_EXECUTION]:
scripts/fill_fillable_fields.pyimplements a runtime monkeypatch for thepypdf.generic.DictionaryObjectclass to resolve a specific formatting bug in version 5.7.0. This modification is transparently documented, limited in scope, and necessary for the correct processing of selection list fields. - [PROMPT_INJECTION]: The skill processes user-provided PDF documents for text and table extraction, which constitutes a standard surface for indirect prompt injection. The skill mitigates risks through explicit processing workflows and automated validation of bounding boxes in
scripts/check_bounding_boxes.pyto ensure accurate data entry.
Audit Metadata