doc-parser
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill uses the
doclinglibrary, which is a reputable document understanding framework from IBM Research. - [PROMPT_INJECTION]: The skill provides an attack surface for Indirect Prompt Injection.
- Ingestion points: Untrusted document files (PDFs, Word documents, and Images) are processed via
DocumentConverter().convert()as described inSKILL.md. - Boundary markers: Absent. There are no instructions or delimiters designed to isolate the extracted content from the agent's control flow.
- Capability inventory: The code examples in
SKILL.mdinclude file system write operations such asos.makedirs,element.image.save, and writing results to disk usingopen().write. - Sanitization: Absent. No filtering or validation of the extracted document text is performed before it is returned to the agent context.
Audit Metadata