Pass
Audited by Gen Agent Trust Hub on Mar 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security risks were identified. All components of the skill are dedicated to the stated purpose of PDF document processing.
- [COMMAND_EXECUTION]: The skill utilizes standard PDF utilities (qpdf, pdftk, poppler-utils) through documented command-line examples and Python scripts. These tools are industry standards for document manipulation and are used appropriately within the skill's context.
- [PROMPT_INJECTION]: The documentation in
forms.mdcontains strict operational directives (e.g., "CRITICAL", "MUST") to guide the agent through complex multi-step workflows. These are functional instructions to ensure accuracy and do not attempt to bypass safety protocols or override agent core instructions. - [SAFE]: A runtime modification (monkeypatch) is used in
fill_fillable_fields.pyto address a specific bug in thepypdflibrary regarding form field selection lists. This is a targeted developer fix for library compatibility and does not execute untrusted code or create new attack surfaces.
Audit Metadata