ClawHub
Back to skill

Security audit

PDF Toolkit Pro

Security checks across malware telemetry and agentic risk

Overview

This is a local PDF utility whose file access matches its purpose, with dependency hygiene issues but no evidence of hidden, deceptive, or exfiltrating behavior.

Install only if you are comfortable with npm dependencies being fetched at install time. For sensitive PDFs or production use, pin dependencies, add a lockfile, update glob to a patched version, and verify outputs because the PDF-to-image feature currently produces per-page PDF files rather than actual images.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (6)

Unpinned Dependencies

Low
Category
Supply Chain
Content
"batch": "node scripts/batch.js"
  },
  "dependencies": {
    "pdf-lib": "^1.17.1",
    "sharp": "^0.33.0",
    "pdf2pic": "^3.1.0",
    "commander": "^11.0.0",
Confidence
88% confidence
Finding
Using a caret range for pdf-lib allows newer minor/patch releases to be installed without explicit review, which can introduce unexpected behavior or a compromised upstream release into the supply chain. In a package that processes user documents, dependency drift increases operational and security risk even if no direct exploit is visible in this file.

Unpinned Dependencies

Low
Category
Supply Chain
Content
},
  "dependencies": {
    "pdf-lib": "^1.17.1",
    "sharp": "^0.33.0",
    "pdf2pic": "^3.1.0",
    "commander": "^11.0.0",
    "glob": "^10.3.0"
Confidence
88% confidence
Finding
The sharp dependency is version-ranged with ^0.33.0, so installs may resolve to different releases over time. Because sharp includes native components and is commonly used on untrusted file inputs, uncontrolled updates increase supply-chain and stability risk.

Unpinned Dependencies

Low
Category
Supply Chain
Content
"dependencies": {
    "pdf-lib": "^1.17.1",
    "sharp": "^0.33.0",
    "pdf2pic": "^3.1.0",
    "commander": "^11.0.0",
    "glob": "^10.3.0"
  },
Confidence
89% confidence
Finding
The pdf2pic dependency is not pinned exactly, which allows silent version changes at install time. Since this package handles document conversion workflows, unreviewed dependency updates could introduce parsing vulnerabilities or malicious code from the supply chain.

Unpinned Dependencies

Low
Category
Supply Chain
Content
"pdf-lib": "^1.17.1",
    "sharp": "^0.33.0",
    "pdf2pic": "^3.1.0",
    "commander": "^11.0.0",
    "glob": "^10.3.0"
  },
  "keywords": ["pdf", "merge", "split", "compress", "convert", "automation"],
Confidence
84% confidence
Finding
commander is specified with a permissive version range, which creates reproducibility and supply-chain exposure even though it is not itself obviously dangerous from this file alone. CLI-facing packages are part of the attack surface because argument parsing bugs or malicious releases can affect script execution paths.

Unpinned Dependencies

Low
Category
Supply Chain
Content
"sharp": "^0.33.0",
    "pdf2pic": "^3.1.0",
    "commander": "^11.0.0",
    "glob": "^10.3.0"
  },
  "keywords": ["pdf", "merge", "split", "compress", "convert", "automation"],
  "author": "AI-Company",
Confidence
95% confidence
Finding
The glob dependency is unpinned and also separately flagged as having a known high-severity advisory, making the version-management weakness more consequential here. In a batch PDF automation tool, file pattern expansion is likely core functionality, so dependency risk is directly relevant to normal use.

Known Vulnerable Dependency: glob==10.3.0 — 1 advisory(ies): CVE-2025-64756 (glob CLI: Command injection via -c/--cmd executes matches with shell:true)

High
Category
Supply Chain
Confidence
97% confidence
Finding
glob 10.3.0 is reported to contain a command injection issue in its CLI via -c/--cmd with shell:true, which can lead to arbitrary command execution if vulnerable functionality is exposed. In a PDF batch-processing skill that likely works with user-supplied file patterns and automation scripts, any use of the glob CLI or wrapper behavior would materially increase the risk of host compromise.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.