pdf-generator
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The
analyze-template.tsscript extracts text and metadata from PDF documents provided as input. While this text could theoretically contain malicious instructions designed to influence an agent's logic, this is a standard risk for document processing tools and is mitigated by the skill's lack of network permissions. - Ingestion points:
scripts/analyze-template.tsreads and parses external PDF files. - Boundary markers: Absent.
- Capability inventory: The skill can read and write files using
Deno.readFileandDeno.writeFileinscripts/generate-from-template.tsandscripts/generate-scratch.ts. - Sanitization: The scripts focus on structural parsing and do not perform content sanitization of extracted text.
- [COMMAND_EXECUTION]: The skill operates via CLI scripts using Deno. The required permissions (
--allow-read,--allow-write) are appropriate for the stated purpose of document generation and manipulation.
Audit Metadata