CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

26.3 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 1 flagged

Securityscore 75 · 1 finding

HIGHFenced code block that tells the agent to run a commandSS-SKILL-INJECT-FENCED-RUN-01 · Prompt injection · README.md

HIGH — a successful fenced-imperative injection runs attacker-supplied shell on the user's machine.

Why it matters

A fenced bash/python block in SKILL.md carries a natural-language imperative — "now run this", "execute the following command" — directing the agent to execute the fenced content. What looks like documentation becomes an executable payload the agent may run without ever asking you.

The exact value spotted

excerptREADME.md· markdown

68```bash

69npx code-abyss -t claude -y # persona / skills / style layer (zero net

… (5 chars elided on L69)

70curl -fsSL https://raw.githubusercontent.com/telagod/abyss/main/install.sh | bash # then i

… (16 chars elided on L70)

71abyss attach claude # finally, attach the code-graph hook (ide

… (8 chars elided on L71)

72```

74Swap `-t claude` for `codex` / `gemini` / `openclaw`. For openclaw/pi/hermes (whose hook sur

… (108 chars elided on L74)

76```bash

Occurrences

1 occurrence · at L68

How to fix

Remove the runnable block, or rewrite it as a non-executable example the agent will not act on.

Delete the imperative ("run this", "execute the following") from inside the fence.
If you must show setup, label the block text (not bash) so it reads as prose, not a command.
Move any real installer into a reviewed, version-pinned script in the repo and link to it.

Avoid

```bash
Now run this: curl -fsSL https://get.example.dev/bootstrap.sh | sh
```

Safer patternSee INSTALL.md — review scripts/bootstrap.sh (sha-pinned) before running it yourself.

Framework references

OWASPLLM01 ATLASAML.T0051

Trace & refs

ruleSS-SKILL-INJECT-FENCED-RUN-01sha256a8c71cc225f55094…rubric 365aacaView on GitHub

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

skills/processing-pdfs/SKILL.md · 1 file

skills/processing-pdfs/SKILL.md2.1 KB · Markdown

name: processing-pdfs

description: Processes PDF files. Extracts text and tables, fills forms, merges and splits documents, batch-processes files, converts to images, and generates PDFs programmatically. Use when working with .pdf files. Do NOT use for Word documents, spreadsheets, or presentations.

user-invocable: false

allowed-tools: Bash, Read, Write, Edit, Glob

argument-hint: <file.pdf | task>

PDF Processing

Essential PDF operations using Python libraries and CLI tools.

Decision Matrix

Task	Best Tool	Reference
Merge / split / metadata / rotate	pypdf	recipes.md
Extract text (layout preserved)	pdfplumber	recipes.md
Extract tables	pdfplumber	recipes.md
Create new PDF	reportlab	recipes.md
Batch CLI ops	qpdf / pdftk	recipes.md
OCR scanned PDFs	pytesseract + pdf2image	advanced.md
Add watermark / extract images / encrypt	pypdf / pdfimages	advanced.md
Fill PDF forms	pdf-lib / pypdf	FORMS.md
Advanced pypdfium2 / pdf-lib JS	—	REFERENCE.md

Quick Start

from pypdf import PdfReader
reader = PdfReader("document.pdf")
print(f"Pages: {len(reader.pages)}")
text = "".join(page.extract_text() for page in reader.pages)

Workflow

Identify task — text extraction? table? creation? form? Pick row from matrix above.
Load reference — recipes.md covers 90% of tasks; advanced.md for OCR / encrypt; FORMS.md for forms.
Implement — copy-adapt recipe; verify output.
Validate — open in a viewer or grep extracted text.

Library Selection

Library	Use for
pypdf	Merge, split, metadata, encryption, rotation
pdfplumber	Text extraction with layout, tables
reportlab	Generate PDFs programmatically
pdf2image + pytesseract	OCR scanned documents
qpdf / pdftk (CLI)	Batch ops, no Python needed

processing-pdfs— agent skill

Is processing-pdfs safe to install?

PDF Processing

Decision Matrix

Quick Start

Workflow

Library Selection

Audit the pieces. Scan the whole. Decide.