ClawHub
Back to skill

Security audit

ComPDF PDF To Json

Security checks across malware telemetry and agentic risk

Overview

The skill is coherent for ComPDF PDF-to-JSON request planning, with disclosed API key use and external document handling that users should approve deliberately.

Install only if you are comfortable using ComPDF as an external PDF processing service. Keep the API key file private, review any request before upload, and avoid sending confidential PDFs unless your ComPDF account, retention, and compliance requirements allow it.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
89% confidence
Finding
The skill instructs the agent to read a local API key file and to prepare or perform network-backed ComPDF operations, but it does not declare corresponding permissions. Hidden file access and outbound network use reduce transparency and can lead to unintended secret access or data exfiltration if the skill is invoked in a broader automation context. The requirement to read a private key file makes this more sensitive than a purely documentation-only skill.

Tp4

High
Category
MCP Tool Poisoning
Confidence
81% confidence
Finding
The skill is described as converting PDFs to JSON, but it also includes maintainer workflow behavior that fetches external documentation, parses HTML, and generates local reference snapshots. This mismatch can mislead reviewers and users about the skill's real capabilities, making it easier for network and filesystem actions to occur without proper scrutiny. While the referenced sync command appears maintenance-related rather than overtly malicious, mixing it into the skill file broadens behavior beyond the declared purpose.

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The documentation describes uploading files to ComPDF and using webhook callbacks, but does not clearly warn that document contents and callback metadata are transmitted to an external third-party service. In an agent skill context, this can lead to unintended exfiltration of sensitive PDFs, OCR text, extracted data, or internal callback URLs if users assume processing is local.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.