Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed PDF-merging integration, but it needs Review because an undocumented endpoint override can redirect PDFs and the API key away from the stated service.
Install only if you are comfortable sending the selected PDFs to Cross-Service-Solutions. Avoid using this for confidential, legal, financial, medical, or regulated documents unless you have approved that provider's handling terms. Review or remove the base-url override before use so the API key and PDFs cannot be redirected by arguments or environment variables.
scripts/merge-pdf.py:194Arbitrary Upload Destination Can Expose PDF Contents and API Credentials
scripts/merge-pdf.py:31PDF Validation Relies Only on the Filename Extension
requirements.txt:1Open-Ended Dependency Version Prevents Reproducible Installation
The skill uses 'env' capability that is not listed in its permissions. This may indicate deceptive intent or missing permission declarations.
The skill uses 'network' capability that is not listed in its permissions. This may indicate deceptive intent or missing permission declarations.
The README explicitly instructs users to upload their PDF files to a third-party service but does not warn about privacy, retention, confidentiality, or jurisdictional handling of the uploaded documents. Because PDFs often contain sensitive business or personal data, this omission can lead users to transmit confidential information off-platform without informed consent.
This step documents transmission of user-provided PDFs to an external domain for processing, which creates a real data-exfiltration surface by design. In the context of a file-merging skill, sending full document contents to a remote service is more dangerous than ordinary API metadata exchange because the payload itself may contain sensitive data.
- Register / get key: https://login.cross-service-solutions.com/register
## How it works
1) Upload PDFs to `POST https://api.xss-cross-service-solutions.com/solutions/solutions/api/30`
2) Poll `GET https://api.xss-cross-service-solutions.com/solutions/solutions/api/<job_id>` until done
3) Return `output.files[0].path` as the download URL
Polling the external service for job completion continues interaction with the third-party processor and confirms that user data has been handed off to an outside system. While less severe than the initial upload, it is still part of the same external-processing design and contributes to the overall privacy and trust risk.
## How it works
1) Upload PDFs to `POST https://api.xss-cross-service-solutions.com/solutions/solutions/api/30`
2) Poll `GET https://api.xss-cross-service-solutions.com/solutions/solutions/api/<job_id>` until done
3) Return `output.files[0].path` as the download URL
## Script (CLI)
The skill explicitly uploads user-provided PDF files to a third-party service, but it does not provide a clear user-facing warning about that data transfer or the associated exposure of file contents and metadata. This can lead users to unknowingly send sensitive documents outside the local agent environment, creating confidentiality and compliance risks.
The skill is designed to send files to an external API endpoint, which creates a real data exfiltration surface because complete user PDFs are transmitted off-platform. In this context the external call is functionally necessary, but it remains security-relevant because sensitive document contents may be exposed to a third party if users are not clearly informed and if the service is not properly vetted.
## API endpoints
Base URL:
- `https://api.xss-cross-service-solutions.com/solutions/solutions`
Create merge job:
- `POST /api/30`
This skill uploads user-provided PDFs to an external third-party endpoint, creating a real data exfiltration and privacy risk because document contents may be sensitive. The risk is heightened by the hardcoded external service and base-url override support, which means confidential files leave the local trust boundary and could also be redirected to another endpoint if configuration is tampered with.
import requests
DEFAULT_BASE_URL = "https://api.xss-cross-service-solutions.com/solutions/solutions"
CREATE_PATH = "/api/30"
The dependency is specified as requests>=2.32.0 without an upper bound or exact pin, which makes builds non-reproducible and can unintentionally pull in different versions over time. In a skill that uploads user-provided PDFs to an external service, relying on an unpinned HTTP client increases supply-chain and stability risk because future installs may include a vulnerable or behavior-changing release.
requests>=2.32.0
The manifest references requests but does not pin the exact version, so it is impossible to verify from this file alone whether installation will resolve to a release affected by known advisories. Because this skill likely handles outbound requests, uploads user files, and may interact with redirects, auth, or URL handling, an unverifiable requests version leaves open the possibility of inheriting known client-side security flaws depending on the environment and install time.
No suspicious patterns detected.