ComPDF Word To PDF

• Outcome: Review
• Latest audit: Aug 3, 2026 · 8:02 AM UTC
• Version: 1.0.0

Overview

The skill is mostly a Word-to-PDF ComPDF helper, but it bundles broad unrelated API material that could steer an agent beyond that narrow task.

Review before installing. Use this only if you intend to upload Word documents to ComPDF for conversion and are comfortable storing a local ComPDF API key. The main instructions are narrow, but the package contains broad API references that should ideally be trimmed or allowlisted to the Word-to-PDF endpoint before routine use.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Tool Misuse: Tool Parameter Abuse, Chaining Abuse, Unsafe Defaults
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection

Findings (8)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 87% confidence
• Finding: The skill instructs the agent to read local files for API keys and to use network access, but it does not declare any permissions or constraints for those capabilities. This creates a trust and containment problem: users may invoke a seemingly simple conversion skill without realizing it can access sensitive local files and send data or credentials to external services.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 91% confidence
• Finding: The declared purpose is narrowly Word-to-PDF conversion, but the behavior described by the finding includes broad documentation scraping, local file generation, and coverage of many unrelated APIs. That mismatch is dangerous because it hides materially different capabilities from the user, increasing the chance of unintended network activity, excess data access, and use of endpoints outside the skill's stated scope.

Description-Behavior Mismatch

Medium

• Confidence: 98% confidence
• Finding: The reference file exposes a much broader API surface than the skill’s declared Word-to-PDF purpose, including decryption, watermark removal, document parsing, extraction, and destructive PDF editing. In an agent setting, this creates capability overreach: prompts or downstream code could invoke sensitive or destructive operations that users did not intend when selecting a narrowly scoped skill.

Context-Inappropriate Capability

Medium

• Confidence: 90% confidence
• Finding: The script snapshots a very broad set of ComPDF documentation pages, including AI, extraction, parsing, and many unrelated conversion/PDF endpoints, despite the skill being described as Word-to-PDF only. This creates capability drift between the declared skill scope and the embedded reference material, increasing the chance that downstream agents, prompts, or maintainers will treat out-of-scope endpoints as authorized and invoke unintended features.

Description-Behavior Mismatch

Medium

• Confidence: 87% confidence
• Finding: Although this file is only a reference-sync utility, its behavior supports collecting and packaging documentation for a much broader ComPDF API surface than the manifest advertises. In an agent skill context, this mismatch is dangerous because reference material often shapes tool usage; a broader bundled API map can enable unauthorized or unexpected operations beyond Word-to-PDF, undermining least privilege and user expectations.

Missing User Warnings

Medium

• Confidence: 96% confidence
• Finding: The document instructs users to upload files to an external ComPDF service but does not prominently warn that document contents leave the local environment and are processed by a third party. This can lead to accidental disclosure of sensitive contracts, reports, or regulated data when users assume the conversion is local or first-party.

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The bundled reference documents PDF decryption/removal of password protection without contextual safeguards, despite the skill being presented as Word-to-PDF. In an agent environment, including such capability can normalize or enable unauthorized removal of protections from uploaded documents, exposing confidential content and bypassing user expectations.

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

FLAT_REPLACELZW Replace LZW compression with Flate

RMUNUSEDTARGET Remove unused targets

OPTIMIZEPAGECONTENT Optimize page content

• Confidence: 88% confidence
• Finding: RMFORMCOMMITIMPORTRESETACTION Remove form submit/import/

VirusTotal

VirusTotal findings are pending for this skill version.

Static analysis

No suspicious patterns detected.