ClawHub
Back to skill

Security audit

md2pdf

Security checks across malware telemetry and agentic risk

Overview

The skill converts Markdown to PDF as advertised, but it runs unsanitized document content in Chrome with the browser sandbox disabled.

Install only if you will use it on Markdown you trust. Avoid rendering files from unknown sources unless the skill is changed to keep Chrome sandboxing enabled, sanitize or escape raw HTML, disable script execution, and clearly document remote-resource behavior.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Context-Inappropriate Capability

High
Confidence
97% confidence
Finding
The script launches Chrome with --no-sandbox while rendering attacker-controlled Markdown-derived HTML. Because rendered Markdown may include active HTML elements or resource references, any browser compromise during rendering would execute without Chrome's normal sandbox isolation, increasing the chance of local code execution or file/system access under the user's privileges.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

Detected: suspicious.dangerous_exec

Shell command execution detected (child_process).

Critical
Code
suspicious.dangerous_exec
Location
scripts/md2pdf.js:155