insight-pdf
Pass
Audited by Gen Agent Trust Hub on Apr 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches Playwright and Chromium browser binaries from Microsoft's official distribution channels. These are trusted sources for the skill's intended purpose of document conversion.\n- [COMMAND_EXECUTION]: Uses a Node.js script to manage a headless browser for rendering PDFs. The implementation follows best practices by using system temporary directories and ensuring all intermediate HTML artifacts are deleted after execution.\n- [PROMPT_INJECTION]: Processes user-provided text through placeholders in
templates/insight-report.html(Ingestion points). No specific sanitization or boundary markers are used for the injected content. The conversion script (convert.js) utilizes Playwright withfile://access to render the template. This design creates a surface for indirect prompt injection, which is a common characteristic of such document generation tools and is handled here within a controlled execution flow.
Audit Metadata