Back to skill

Security audit

Merge PDF

Security checks across malware telemetry and agentic risk

Overview

This skill does what it says: it merges user-selected PDFs by sending them to a named third-party API, with no evidence of hidden behavior or persistence.

Install only if you are comfortable sending the PDFs you choose to Cross-Service-Solutions for processing. Avoid confidential, regulated, legal, financial, or proprietary documents unless you have reviewed and accepted that provider's privacy, retention, and compliance terms.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (8)

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The README explicitly instructs users to upload their PDF documents to a third-party service, but it provides no warning about privacy, retention, jurisdiction, or handling of potentially sensitive document contents. This is dangerous because users may unknowingly transmit confidential data to an external processor without informed consent or controls, increasing risk of data leakage or compliance violations.

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The skill instructs the agent to upload user-provided PDF files to a third-party service, but it does not prominently warn the user about external data transfer, retention, or privacy implications before sending potentially sensitive documents. This can lead to inadvertent disclosure of confidential content to an external processor without informed consent.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The skill is explicitly designed to upload user-provided PDF contents to an external third-party service, but the script provides no explicit user-facing consent, privacy notice, or data-handling disclosure before transmission. Because PDFs often contain sensitive business or personal information, silently exfiltrating document contents off-system creates a real confidentiality risk in an agent-skill context.

External Transmission

Medium
Category
Data Exfiltration
Content
- Register / get key: https://login.cross-service-solutions.com/register

## How it works
1) Upload PDFs to `POST https://api.xss-cross-service-solutions.com/solutions/solutions/api/30`
2) Poll `GET https://api.xss-cross-service-solutions.com/solutions/solutions/api/<job_id>` until done
3) Return `output.files[0].path` as the download URL
Confidence
94% confidence
Finding
https://api.xss-cross-service-solutions.com/

External Transmission

Medium
Category
Data Exfiltration
Content
## How it works
1) Upload PDFs to `POST https://api.xss-cross-service-solutions.com/solutions/solutions/api/30`
2) Poll `GET https://api.xss-cross-service-solutions.com/solutions/solutions/api/<job_id>` until done
3) Return `output.files[0].path` as the download URL

## Script (CLI)
Confidence
88% confidence
Finding
https://api.xss-cross-service-solutions.com/

External Transmission

Medium
Category
Data Exfiltration
Content
## API endpoints
Base URL:
- `https://api.xss-cross-service-solutions.com/solutions/solutions`

Create merge job:
- `POST /api/30`
Confidence
86% confidence
Finding
https://api.xss-cross-service-solutions.com/

External Transmission

Medium
Category
Data Exfiltration
Content
import requests


DEFAULT_BASE_URL = "https://api.xss-cross-service-solutions.com/solutions/solutions"
CREATE_PATH = "/api/30"
Confidence
96% confidence
Finding
https://api.xss-cross-service-solutions.com/

Unpinned Dependencies

Low
Category
Supply Chain
Content
requests>=2.32.0
Confidence
97% confidence
Finding
requests>=2.32.0

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.