Security
PDF Prompt Injection Scanner
Compare safe and unsafe PDF extraction runs to detect hidden text, off-page content, tiny text, and hidden-layer prompt injection risks
html· HTML resultOpen tool
Quick start
Call this tool from your code in three languages.
cURL
# 1) Request a presigned URL → returns { uploadUrl, storageKey }
curl -X POST 'https://api.elysiatools.com/api/upload/presign/pdf-prompt-injection-scanner' \
-H 'Content-Type: application/json' \
-d '{"filename":"pdfFile.ext","contentType":"application/octet-stream","size":12345}'
# 2) PUT the file bytes directly to the presigned uploadUrl
curl -X PUT '<presigned uploadUrl>' \
--data-binary @/path/to/file.ext
# 3) Call the tool, passing the returned storageKey for each file field
curl -X POST 'https://api.elysiatools.com/en/api/tools/pdf-prompt-injection-scanner' \
-F 'pdfFile=uploads/2026/01/01/your-tool-1700000000000-abc123.ext' \
-F 'scanHiddenText=true' \
-F 'scanOffPageContent=true' \
-F 'scanTinyText=true' \
-F 'scanHiddenLayers=true' \
-F 'useStructTree=false' \
-F 'sanitizeSensitiveData=false'