ClawHub
Back to skill

Security audit

document-conversion

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed document-to-markdown conversion helper with expected local file and URL handling, but users should be mindful when converting private remote links.

Install only if you want document and URL conversion support. Avoid giving it confidential local files or private remote URLs unless you are comfortable with the configured tools reading or fetching that content, and review the optional markitdown MCP setup before adding it to your environment.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Confidence
93% confidence
Finding
The manifest trigger list contains broad phrases like "documents", "pdf", "docx", and especially the sentence-like trigger "a skill must ingest PDF, DOCX, or URL content," which can cause the skill to activate in many loosely related contexts. Overly broad activation increases the chance that external document-conversion behavior is invoked unexpectedly, expanding the attack surface for untrusted content ingestion and creating opportunities for prompt-injection or unsafe processing chains in downstream skills.

Missing User Warnings

Low
Confidence
87% confidence
Finding
The skill explicitly instructs use of WebFetch on remote URLs but does not warn the user that fetching a URL may transmit the target URL and retrieved content through network-connected tooling. In a document-conversion skill, users may submit sensitive intranet links, signed URLs, or private documents, so the missing disclosure can lead to unintended data exposure or privacy violations.

Missing User Warnings

Low
Confidence
91% confidence
Finding
The document explicitly instructs users to pass `http://` and `https://` URLs directly to the MCP conversion tool and states that the MCP server fetches the remote resource, but it provides no warning that doing so causes outbound network access and transmits the requested URL to another component. In a document-conversion skill, this can lead to unexpected data exposure, privacy issues, or accidental retrieval of internal/sensitive URLs if users assume conversion is local-only.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.