epub-pro-converter
Pass
Audited by Gen Agent Trust Hub on Apr 9, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted content from EPUB files, creating a potential surface for indirect prompt injection.\n
- Ingestion points:
script/convert.pyextracts text content and metadata from user-provided EPUB files.\n - Boundary markers: No explicit delimiters or instructions are used to prevent the agent from interpreting embedded text as instructions.\n
- Capability inventory: The skill uses
osandshutilfor local file system operations (read/write/copy).\n - Sanitization: The tool uses
BeautifulSoupandmarkdownifyfor structural conversion, but it does not specifically sanitize the extracted text for malicious agent instructions.
Audit Metadata