skills/sargupta/sahayakai/pdf/Gen Agent Trust Hub

pdf

Pass

Audited by Gen Agent Trust Hub on Mar 29, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill documentation and scripts utilize the subprocess module to interface with command-line tools such as tectonic, qpdf, and pdftotext for PDF generation and processing tasks. These calls are standard for a document processing toolkit and use localized arguments.
  • [PROMPT_INJECTION]: The forms.md and SKILL.md files contain explicit directives (e.g., "MANDATORY", "CRITICAL") to guide the agent through specific PDF generation and form-filling workflows. These instructions are intended to ensure structural integrity and accuracy in document handling.
  • [DYNAMIC_EXECUTION]: The script scripts/fill_fillable_fields.py implements a runtime monkeypatch for the pypdf library. This is documented as a specific workaround for a known issue in pypdf version 5.7.0 regarding selection list formatting and is limited to the local execution context.
  • [DATA_EXPOSURE]: The documentation in forms.md references absolute file system paths (e.g., /Users/sargupta/...) for its utility scripts. This reveals information about the author's local development environment but does not involve sensitive user data or credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 29, 2026, 09:21 PM