insight-pdf

Pass

Audited by Gen Agent Trust Hub on Apr 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches Playwright and Chromium browser binaries from Microsoft's official distribution channels. These are trusted sources for the skill's intended purpose of document conversion.\n- [COMMAND_EXECUTION]: Uses a Node.js script to manage a headless browser for rendering PDFs. The implementation follows best practices by using system temporary directories and ensuring all intermediate HTML artifacts are deleted after execution.\n- [PROMPT_INJECTION]: Processes user-provided text through placeholders in templates/insight-report.html (Ingestion points). No specific sanitization or boundary markers are used for the injected content. The conversion script (convert.js) utilizes Playwright with file:// access to render the template. This design creates a surface for indirect prompt injection, which is a common characteristic of such document generation tools and is handled here within a controlled execution flow.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 17, 2026, 02:27 AM