pdf-generator

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The analyze-template.ts script extracts text and metadata from PDF documents provided as input. While this text could theoretically contain malicious instructions designed to influence an agent's logic, this is a standard risk for document processing tools and is mitigated by the skill's lack of network permissions.
  • Ingestion points: scripts/analyze-template.ts reads and parses external PDF files.
  • Boundary markers: Absent.
  • Capability inventory: The skill can read and write files using Deno.readFile and Deno.writeFile in scripts/generate-from-template.ts and scripts/generate-scratch.ts.
  • Sanitization: The scripts focus on structural parsing and do not perform content sanitization of extracted text.
  • [COMMAND_EXECUTION]: The skill operates via CLI scripts using Deno. The required permissions (--allow-read, --allow-write) are appropriate for the stated purpose of document generation and manipulation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 01:07 PM
Security Audit — agent-trust-hub — pdf-generator