T09 · Insecure Skill Coding Practices
Warning
- Location
SKILL.md:33- Finding
Plaintext Persistent Storage of a ComPDF API Key
- Content
View full analysis
- Remediation
View remediation
Security audit
ComPDF Toolkit
Security checks for vulnerabilities and agentic risk
Overview
This is a disclosed ComPDF document-processing helper, with real privacy and API-key handling considerations but no artifact-backed malicious behavior.
Install only if you are comfortable sending selected documents and any needed PDF passwords to ComPDF for processing. Keep the skill-local api_key file private, exclude it from source control and archives, and rotate the ComPDF key if it may have been exposed. Use extra care with confidential PDFs, decryption outputs, and AI extraction of sensitive fields.
Vulnerability Patterns
- Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)
Vulnerability Patterns
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (16)
Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md 3. Read the matching heading in `references/official-api-reference.md`. Use its exact endpoint path, request fields, request mode, and response fields; do not i
Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md 6. Resolve credentials only from `api_key` in the directory containing this `SKILL.md`. Read its first non-empty line. Do not inspect environment variables or a
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 96% confidence
- Finding
The documentation repeatedly instructs users to upload source files to ComPDF and retrieve outputs from ComPDF-hosted download URLs, but it does not foreground that documents and extracted content leave the local trust boundary and are transmitted to a third-party service. In a document-processing skill, this omission can cause unintentional disclosure of sensitive PDFs, OCR text, and derived data.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 98% confidence
- Finding
This file is predominantly English, but some parameter descriptions are left in Chinese, which creates an avoidable language inconsistency for users who did not opt into that locale. That violates the language/locale policy criterion because the document does not offer a language choice or justify the mixed-language constraint.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 98% confidence
- Finding
This file is predominantly English, but some parameter descriptions are left in Chinese, which creates an avoidable language inconsistency for users who did not opt into that locale. That violates the language/locale policy criterion because the document does not offer a language choice or justify the mixed-language constraint.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 99% confidence
- Finding
This file is predominantly English, but some parameter descriptions are left in Chinese, which creates an avoidable language inconsistency for users who did not opt into that locale. That violates the language/locale policy criterion because the document does not offer a language choice or justify the mixed-language constraint.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 99% confidence
- Finding
This file is predominantly English, but some parameter descriptions are left in Chinese, which creates an avoidable language inconsistency for users who did not opt into that locale. That violates the language/locale policy criterion because the document does not offer a language choice or justify the mixed-language constraint.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 98% confidence
- Finding
This file is predominantly English, but some parameter descriptions are left in Chinese, which creates an avoidable language inconsistency for users who did not opt into that locale. That violates the language/locale policy criterion because the document does not offer a language choice or justify the mixed-language constraint.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 98% confidence
- Finding
This file is predominantly English, but some parameter descriptions are left in Chinese, which creates an avoidable language inconsistency for users who did not opt into that locale. That violates the language/locale policy criterion because the document does not offer a language choice or justify the mixed-language constraint.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 98% confidence
- Finding
This file is predominantly English, but some parameter descriptions are left in Chinese, which creates an avoidable language inconsistency for users who did not opt into that locale. That violates the language/locale policy criterion because the document does not offer a language choice or justify the mixed-language constraint.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 98% confidence
- Finding
This file is predominantly English, but some parameter descriptions are left in Chinese, which creates an avoidable language inconsistency for users who did not opt into that locale. That violates the language/locale policy criterion because the document does not offer a language choice or justify the mixed-language constraint.
- Content
Ssd 3
Medium
- Category
- Not specified by scanner
- Confidence
- 96% confidence
- Finding
The example response includes a plaintext password inside the returned fileParameter JSON (for example, userPassword embedded in the response payload). This normalizes secret echoing and can lead integrators to log API responses, persist passwords in telemetry, or expose credentials through debugging and audit systems.
- Content
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 91% confidence
- Finding
The markdown explains how to remove password protection from encrypted PDFs, which changes the protection state of a document in a potentially security-impacting way. Although the feature purpose is described, there is no explicit caution to users that the resulting file will be unprotected and should be handled carefully.
- Content
Description-Behavior Mismatch
Medium
- Category
- Not specified by scanner
- Confidence
- 96% confidence
- Finding
The reference file materially expands the documented capability of the skill by introducing AI/IDP parsing and extraction endpoints that are not reflected in the manifest description. This creates a security-relevant scope mismatch: operators or downstream agents may invoke higher-sensitivity document understanding features, including extraction of structured content from uploaded files, without explicit disclosure, review, or consent expectations.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 97% confidence
- Finding
This file is predominantly English, but some parameter descriptions are left in Chinese, which creates an avoidable language inconsistency for users who did not opt into that locale. That violates the language/locale policy criterion because the document does not offer a language choice or justify the mixed-language constraint.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 99% confidence
- Finding
This file is predominantly English, but some parameter descriptions are left in Chinese, which creates an avoidable language inconsistency for users who did not opt into that locale. That violates the language/locale policy criterion because the document does not offer a language choice or justify the mixed-language constraint.
- Content
Static analysis
No suspicious patterns detected.