OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
This skill provides a robust toolkit for PDF manipulation but carries a high risk of Indirect Prompt Injection. It ingests untrusted data from PDF files through extraction and OCR, then directs the agent to analyze this content to make decisions, which could be subverted by embedded instructions. It also requires numerous external system utilities and libraries.
Detected behaviors
No alerts
No issues
12/12 files flagged
Score: 93/100 · 2 sections analyzed