ClawHub
Back to skill

Security audit

md2pdf

Security checks across malware telemetry and agentic risk

Overview

This is a coherent Markdown-to-PDF skill, but users should be aware it may install large rendering dependencies and download cached JavaScript assets for Mermaid and highlighting.

Install only if you are comfortable with pandoc/Playwright/Chromium setup and possible first-run JavaScript asset downloads. For sensitive or offline environments, ask where Mermaid.js and highlight.js are fetched from, prefer pinned or vendored assets, and avoid storing important PDF passwords in config defaults.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (3)

Description-Behavior Mismatch

Low
Confidence
84% confidence
Finding
The skill’s stated purpose is Markdown-to-PDF conversion, but the documentation also discloses automatic downloading and local caching of Mermaid.js and highlight.js assets. This expands the operational behavior beyond simple local conversion and introduces undeclared supply-chain and network exposure, even if the feature is plausibly intended to support rendering.

Context-Inappropriate Capability

Medium
Confidence
90% confidence
Finding
Automatic network-dependent asset retrieval during document conversion creates a supply-chain risk: third-party JavaScript assets could be tampered with, replaced, or fetched from unexpected locations, affecting the integrity of the conversion pipeline. In a tool expected to process local documents deterministically, hidden network activity is especially risky because users may not anticipate external dependencies or content execution paths.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The instructions do not clearly warn users that conversion may trigger automatic downloads and local caching of Mermaid.js/highlight.js. This lack of transparency can violate user expectations, hinder security review, and cause unintended network access in restricted or sensitive environments.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.