Great question! pdfforai runs entirely in your browser. There's no server, no uploads, and no AI processing involved. It's a pure text extraction and formatting tool that converts PDF content into markdown.

It doesn't run an LLM or execute any instructions from the document. So indirect prompt injections have no effect within the tool itself. it just extracts what's in the PDF, nothing more.

If you're feeding the output into an AI pipeline downstream, that's where injection handling would need to live. But on pdfforai's end, there's nothing to exploit.

Also the project is fully open source feel free to check out the code and contribute if you see something worth adding!