ClawHub
Back to skill

Security audit

PDF to Markdown

Security checks across malware telemetry and agentic risk

Overview

This PDF conversion skill is mostly coherent, but its install instructions ask users to execute a mutable remote installer directly in a shell.

Review the upstream install script before running it. Prefer manual installation with pip and your OS package manager for Java and OCR dependencies, or download the installer, verify its contents, and run it only in an environment where executing third-party setup code is acceptable.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
98% confidence
Finding
The skill recommends executing a remotely fetched installer by piping it directly into bash, which gives arbitrary code from a mutable external source immediate execution on the user's system. Because this is an installation step in the skill itself, users are likely to copy-paste it without review, increasing the chance of compromise if the upstream script, GitHub account, or delivery path is tampered with.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.