Security audit

Premium PDF

Security checks across malware telemetry and agentic risk

Overview

This skill locally turns user-provided markdown into a styled PDF, and the concerning scanner signals are dependency hygiene risks rather than evidence of hidden or harmful behavior.

Install it in an isolated Python environment and consider pinning vetted versions of reportlab and Pillow before use. Be aware that the skill intentionally rewrites some wording during its de-AI pass, so review generated PDFs before sharing when exact wording matters.

SkillSpector

Vulnerability Patterns

Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (4)

Unpinned Dependencies

Low

Category: Supply Chain
Content: reportlab>=4.0.0 Pillow>=9.0.0
Confidence: 92% confidence
Finding: The dependency is specified with only a lower bound, which allows future installs to resolve to different versions over time and makes builds non-reproducible. In a PDF-generation skill that processes markdown and likely untrusted document content, loose versioning increases supply-chain risk and can unexpectedly pull in vulnerable or behavior-changing releases.

Unpinned Dependencies

Low

Category: Supply Chain
Content: reportlab>=4.0.0 Pillow>=9.0.0
Confidence: 92% confidence
Finding: The Pillow requirement is also unpinned, so deployments may resolve to inconsistent versions depending on install time and environment. Because image parsing libraries often handle complex, attacker-controlled inputs, unrestricted upgrades or drift can expose the skill to newly introduced or unresolved security issues.

Known Vulnerable Dependency: reportlab — 6 advisory(ies): CVE-2023-33733 (Reportlab vulnerable to remote code execution); CVE-2020-28463 (Server-side Request Forgery (SSRF) via img tags in reportlab); CVE-2019-19450 (ReportLab vulnerable to remote code execution via paraparser) +3 more

Critical

Category: Supply Chain
Confidence: 97% confidence
Finding: The requirement references reportlab without constraining it to a known non-vulnerable release, while the package has multiple severe advisories including remote code execution and SSRF. This is especially dangerous in a markdown-to-PDF skill, because PDF rendering commonly processes rich text, inline images, and parser features that can be influenced by untrusted input, increasing the chance that vulnerable code paths are reachable.

Known Vulnerable Dependency: Pillow — 10 advisory(ies): CVE-2016-2533 (Pillow buffer overflow in ImagingPcdDecode); CVE-2023-50447 (Arbitrary Code Execution in Pillow); CVE-2021-27922 (Pillow Uncontrolled Resource Consumption) +7 more

Critical

Category: Supply Chain
Confidence: 96% confidence
Finding: Pillow is included without pinning to a version known to be free of the cited vulnerabilities, and the library has a history of issues including code execution and resource-exhaustion bugs. In this skill's context, generating polished PDFs may involve embedded or transformed images, so attacker-supplied image content could trigger parsing flaws or denial-of-service conditions during processing.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.