ComPDF Ocr

• Outcome: Pass
• Latest audit: Aug 3, 2026 · 6:59 AM UTC
• Version: 1.0.0

Overview

This OCR skill is purpose-aligned and disclosed, though users should understand that documents and an API key are used with ComPDF’s external service.

Install this only if you are comfortable using ComPDF as an external processor for the documents you choose to OCR. Keep the API key file private, confirm before uploading sensitive documents, and treat the bundled non-OCR reference sections as out of scope for this OCR skill.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Tool Misuse: Tool Parameter Abuse, Chaining Abuse, Unsafe Defaults
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration

Findings (10)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 86% confidence
• Finding: The skill instructs the agent to read a local API key file, potentially write local reference snapshots via the maintainer workflow, and send documents plus the key to an external ComPDF service, yet no explicit permission model is declared. That mismatch is dangerous because users and policy systems may not realize the skill performs local secret access, file operations, and network egress, increasing the chance of unintended data exposure or overbroad execution.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 81% confidence
• Finding: The skill is presented as narrowly scoped to OCR, but the referenced behavior and maintainer flow indicate broader documentation fetching, local snapshot generation, and coverage of many ComPDF APIs beyond OCR. This description-behavior mismatch is risky because it can mislead operators into approving a skill for low-risk OCR use while it enables broader network activity and potentially document-handling actions outside the declared scope.

Description-Behavior Mismatch

High

• Confidence: 95% confidence
• Finding: The reference file exposes a much broader capability surface than the skill’s declared OCR-focused purpose, including conversion, editing, security, generation, and AI extraction workflows. This creates a scope-mismatch risk: an agent or user may invoke powerful document-manipulation features that were not expected, reviewed, or consented to under the skill’s manifest.

Context-Inappropriate Capability

High

• Confidence: 97% confidence
• Finding: Including PDF encryption and especially decryption in an OCR-branded skill grants the ability to remove document protections and alter document access controls outside the stated use case. In context, this is dangerous because users may unknowingly authorize a tool that can strip protections from sensitive files, expanding abuse potential far beyond text recognition.

Context-Inappropriate Capability

Medium

• Confidence: 89% confidence
• Finding: PDF generation from HTML/templates is unrelated to OCR and introduces an unnecessary content-creation capability into a document-extraction skill. Broadening from extraction to generation increases the chance of unintended document fabrication, misuse of external HTML/template inputs, and user confusion about what the skill can do.

Context-Inappropriate Capability

High

• Confidence: 96% confidence
• Finding: Page-editing features such as merge, split, delete, extract, insert, and rotate materially exceed an OCR-only purpose and enable destructive or privacy-impacting document modification. In this skill context, these operations are more dangerous because users expecting extraction may instead expose or alter document structure and contents through hidden broad tooling.

Context-Inappropriate Capability

Medium

• Confidence: 90% confidence
• Finding: Watermarking, compression, PDF/A conversion, and document comparison are outside the stated OCR use case and broaden the operational scope without clear justification. This unnecessary expansion increases the chance of unintended file transformation, metadata alteration, or sensitive document analysis beyond what users expect from an OCR tool.

Missing User Warnings

Medium

• Confidence: 91% confidence
• Finding: The documentation describes direct upload of user files and task processing by an external ComPDF service but does not clearly warn that documents, extracted contents, and related metadata are sent off-platform. For an OCR skill handling potentially sensitive documents, lack of disclosure undermines informed consent and can cause privacy, compliance, and data-handling risk.

Missing User Warnings

Medium

• Confidence: 93% confidence
• Finding: The decryption capability removes password protection from PDFs but lacks a strong warning about its destructive security implications and ownership/authorization requirements. In an OCR-focused skill, this is especially risky because users may not realize the tool can permanently produce an unprotected copy of a previously protected document.

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

FLAT_REPLACELZW Replace LZW compression with Flate

RMUNUSEDTARGET Remove unused targets

OPTIMIZEPAGECONTENT Optimize page content

• Confidence: 76% confidence
• Finding: RMFORMCOMMITIMPORTRESETACTION Remove form submit/import/

VirusTotal

65/65 vendors flagged this skill as clean.

Static analysis

No suspicious patterns detected.