Security audit

Ib Summarizer

Security checks across malware telemetry and agentic risk

Overview

This document-processing skill appears purpose-aligned, but its unpinned and vulnerable document parser dependencies make it risky to install for untrusted PDFs or DOCX files.

Install only if you trust the documents being processed or can run the skill in a constrained environment. Prefer a version that pins dependencies, updates or replaces vulnerable PDF/DOCX parsers, and documents input size, timeout, and sandboxing limits.

SkillSpector

By NVIDIA

Vulnerability Patterns

Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (7)

Unpinned Dependencies

Low

Category: Supply Chain
Content: dataclasses docx pdfplumber pypdf2
Confidence: 95% confidence
Finding: The dependency is unpinned, so builds may resolve to different versions over time, reducing reproducibility and making it easier for vulnerable or breaking upstream releases to enter the environment unnoticed. In a document-processing skill, dependency behavior matters because parsers handle complex untrusted file formats.

Unpinned Dependencies

Low

Category: Supply Chain
Content: dataclasses docx pdfplumber pypdf2 python-docx
Confidence: 95% confidence
Finding: The package is declared without a version constraint, which creates supply-chain and reproducibility risk because installation outcomes can change across time and environments. This is especially relevant here because the skill relies on third-party document parsing libraries that may receive security-sensitive changes.

Unpinned Dependencies

Low

Category: Supply Chain
Content: dataclasses docx pdfplumber pypdf2 python-docx
Confidence: 95% confidence
Finding: An unpinned dependency allows uncontrolled upgrades or differing transitive resolution, which can introduce vulnerable code or unexpected parser behavior. Since this skill processes PDFs/DOCX files, predictable and reviewed parser versions are important for safe operation.

Unpinned Dependencies

Low

Category: Supply Chain
Content: dataclasses docx pdfplumber pypdf2 python-docx
Confidence: 98% confidence
Finding: PyPDF2 is not pinned, so deployment may pull in a vulnerable or incompatible release; additionally, this package already has known advisories in this file. Because the skill summarizes Investigator's Brochures from document inputs, it likely parses attacker-controlled or malformed PDFs, increasing exposure to parser flaws and denial-of-service conditions.

Unpinned Dependencies

Low

Category: Supply Chain
Content: docx pdfplumber pypdf2 python-docx
Confidence: 98% confidence
Finding: The unpinned python-docx dependency increases supply-chain uncertainty and, in this case, coincides with a package carrying known XXE-related advisories. In a document-ingestion workflow, XML parser issues can be more dangerous because DOCX files are zip/XML containers that may be supplied by untrusted users.

Known Vulnerable Dependency: pypdf2 — 5 advisory(ies): CVE-2023-36464 (pypdf and PyPDF2 possible Infinite Loop when a comment isn't followed by a chara); CVE-2023-36807 (PyPDF2 vulnerable to possible Infinite Loop when reading malformed objects); CVE-2023-36810 (PyPDF2 quadratic runtime with malformed PDF missing xref marker) +2 more

High

Category: Supply Chain
Confidence: 99% confidence
Finding: PyPDF2 has known vulnerabilities including infinite-loop and quadratic-runtime issues when parsing malformed PDFs. This is dangerous in this skill because it likely ingests external brochure PDFs, so a crafted file could cause denial of service, resource exhaustion, or stuck worker processes during summarization.

Known Vulnerable Dependency: python-docx — 2 advisory(ies): CVE-2016-5851 (Improper Restriction of XML External Entity Reference in python-docx); CVE-2016-5851 (python-docx before 0.8.6 allows context-dependent attackers to conduct XML Exter)

High

Category: Supply Chain
Confidence: 99% confidence
Finding: python-docx is associated with an XXE vulnerability, which can allow malicious DOCX content to trigger external entity resolution during XML parsing. In a skill that processes uploaded clinical documents, this could enable server-side request forgery, unintended local file disclosure, or broader parser abuse if untrusted DOCX files are accepted.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.