Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill processes user-supplied PDF documents through OCR and automated text extraction. This content is subsequently interpreted by the agent to identify form fields and enter data, creating an indirect prompt injection surface.
- Ingestion points: External PDF files are processed in
scripts/convert_pdf_to_images.py,scripts/extract_form_field_info.py, andscripts/check_fillable_fields.py. - Boundary markers: None identified; the agent is instructed to directly analyze the extracted text and images.
- Capability inventory: The skill includes Python scripts for PDF creation and manipulation, and instructions for running system CLI tools.
- Sanitization: No specific sanitization or filtering of extracted content is performed before presentation to the agent.
- [COMMAND_EXECUTION]: The skill provides detailed instructions for the agent to execute various command-line tools such as
qpdf,pdftotext,pdftk, andpdfimages. It also includes several Python utility scripts designed to be executed via the command line for tasks like field extraction and image conversion. - [EXTERNAL_DOWNLOADS]: The documentation references well-known and trusted external libraries including
pypdf,pdfplumber,reportlab, andpdf-lib. These are industry-standard tools for PDF manipulation and are treated as safe dependencies. - [SAFE]: A monkeypatch is implemented in
scripts/fill_fillable_fields.pyto address a specific bug in thepypdflibrary (v5.7.0). This runtime modification is hardcoded and does not incorporate untrusted external input.
Audit Metadata