Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill documentation and scripts utilize the
subprocessmodule to interface with command-line tools such astectonic,qpdf, andpdftotextfor PDF generation and processing tasks. These calls are standard for a document processing toolkit and use localized arguments. - [PROMPT_INJECTION]: The
forms.mdandSKILL.mdfiles contain explicit directives (e.g., "MANDATORY", "CRITICAL") to guide the agent through specific PDF generation and form-filling workflows. These instructions are intended to ensure structural integrity and accuracy in document handling. - [DYNAMIC_EXECUTION]: The script
scripts/fill_fillable_fields.pyimplements a runtime monkeypatch for thepypdflibrary. This is documented as a specific workaround for a known issue inpypdfversion 5.7.0 regarding selection list formatting and is limited to the local execution context. - [DATA_EXPOSURE]: The documentation in
forms.mdreferences absolute file system paths (e.g.,/Users/sargupta/...) for its utility scripts. This reveals information about the author's local development environment but does not involve sensitive user data or credentials.
Audit Metadata