ClawHub
Back to skill

Security audit

PDF Read/Write Toolkit

Security checks for vulnerabilities and agentic risk

Overview

This is a straightforward local PDF toolkit whose file access is user-directed and consistent with its stated purpose.

Install only if you are comfortable running local Python PDF-processing libraries on documents you choose. Avoid processing highly sensitive or untrusted PDFs/HTML in a privileged workspace, and remember that metadata extraction can print document metadata such as title and author.

SkillSpector

Vulnerability Patterns
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Lp3

Medium
Category
MCP Least Privilege
Confidence
93% confidence
Finding
The skill clearly performs filesystem reads on user-supplied PDF, HTML, Markdown, CSS, and output paths, but it does not declare any permissions. This creates a mismatch between documented capabilities and the security model, which can lead to unauthorized or overly broad file access if the runtime relies on declared permissions for enforcement or review.

Static analysis

No suspicious patterns detected.