ComPDF PDF To Markdown

• Outcome: Pass
• Latest audit: Aug 3, 2026 · 7:09 AM UTC
• Version: 1.0.0

Overview

This skill is a disclosed ComPDF PDF-to-Markdown request helper, but users should understand that PDFs and a local ComPDF API key are used for an external service.

Install only if you are comfortable sending selected PDFs to ComPDF for processing and storing a local ComPDF API key file. Do not use it for confidential or regulated PDFs unless your organization permits ComPDF processing and retention behavior.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands

Findings (11)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 88% confidence
• Finding: The skill describes capabilities that involve local file access and outbound network use, but it does not declare those permissions explicitly. That weakens user and platform visibility into sensitive behaviors, especially because the workflow includes reading a local API key and sending documents to an external service.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 84% confidence
• Finding: The skill is presented as a narrow PDF-to-Markdown utility, but the documented maintainer behavior and referenced materials indicate broader network fetching, documentation scraping, and coverage of unrelated API areas. This mismatch can mislead users and reviewers about the true operational scope, causing them to authorize a skill that does more than expected.

Description-Behavior Mismatch

Medium

• Confidence: 91% confidence
• Finding: The workflow requires resolving an API key and sending documents to external ComPDF endpoints, which means potentially sensitive PDFs leave the local environment. In a document-processing skill, that is a material security and privacy concern if not made explicit and consented to, especially for confidential or regulated content.

Context-Inappropriate Capability

Medium

• Confidence: 86% confidence
• Finding: The skill instructs reading local credential files and using them for authenticated external requests, which introduces secret-handling and exfiltration risk beyond a simple format-conversion claim. Even though it says not to display the key, accessing local secrets is sensitive behavior and should be tightly scoped, disclosed, and permissioned.

Description-Behavior Mismatch

High

• Confidence: 97% confidence
• Finding: The reference file exposes an entire multi-purpose ComPDF platform inside a skill whose stated purpose is only PDF-to-Markdown conversion. That broad capability expansion can enable unintended or unauthorized actions by downstream agents, including file mutation, data extraction, and security-sensitive operations that exceed user expectations and least-privilege boundaries.

Context-Inappropriate Capability

High

• Confidence: 98% confidence
• Finding: Including encryption and especially decryption capabilities in a PDF-to-Markdown skill materially expands the attack surface into document protection removal. A model or integration that derives available actions from this reference could use decryption features on sensitive files, defeating user intent and exposing protected content.

Context-Inappropriate Capability

High

• Confidence: 96% confidence
• Finding: Documenting destructive editing operations such as delete, extract, insert, rotate, and merge inside a conversion-focused skill creates capability confusion and increases the chance of unintended document modification or loss. If an agent interprets this file as authoritative for available actions, it may perform mutating operations the user never requested.

Context-Inappropriate Capability

High

• Confidence: 95% confidence
• Finding: The AI parsing and extraction sections go far beyond markdown conversion and introduce high-volume document analysis and structured data extraction capabilities. In the context of a simple PDF-to-Markdown skill, this can cause oversharing, broader retention of sensitive content, and misuse of documents for extraction workflows the user did not authorize.

Missing User Warnings

Medium

• Confidence: 94% confidence
• Finding: The documentation describes direct upload of user documents to ComPDF infrastructure without a clear privacy or data-transfer warning. In a document-processing skill, omission of off-system transmission disclosure can lead users to unknowingly send confidential files to a third-party service, creating confidentiality and compliance risk.

Missing User Warnings

Medium

• Confidence: 89% confidence
• Finding: The page deletion operation is irreversible content removal, yet the documentation presents it as routine without safety warnings. In an agent setting, lack of cautionary language increases the chance of accidental destructive actions against important user documents.

Missing User Warnings

Medium

• Confidence: 93% confidence
• Finding: The decryption section explains how to remove PDF protection but does not warn that this strips access controls and may expose sensitive information. In a skill ecosystem, presenting decryption as a normal convenience action can normalize misuse of protected files and undermine user or organizational security expectations.

VirusTotal

65/65 vendors flagged this skill as clean.

Static analysis

No suspicious patterns detected.