Security audit

web page to pdf

Security checks for vulnerabilities and agentic risk

Overview

This skill does what it claims, converting user-provided web pages to PDFs, but it should be used only with trusted URLs and a controlled output folder.

Install this only if you are comfortable running a local browser-based converter. Use it with URLs you intentionally choose, avoid converting local/private-network addresses unless that is your goal, and provide simple filenames in a dedicated working directory to prevent accidental overwrites. For stronger security, pin Playwright versions and run the converter in a restricted environment.

A.I.G

Vulnerability Patterns

Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions

Findings (3)

T05 · Unauthorized Access and Privilege Escalation

Error

Location: scripts/pdf2.py:24
Finding: Unrestricted URL Navigation Enables Server-Side Request Forgery
Content: View full analysis
`, an internal hostname, or a private-network address. 2. Alternatively, the attacker supplies a public URL that redirects to an internal destination. 3. The script accepts the URL because it uses an allowed scheme. 4. Playwright connects to the destination using the host's network access. 5. The internal response is rendered and written to the output PDF. 6. The attacker obtains the PDF and inspects information exposed by the internal service. ### Impact Assessment An attacker may access HTTP services reachable from the execution environment, including local administration interfaces, private intranet applications, development services, and potentially cloud instance metadata endpoints. ...[truncated 217 chars]
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Warning

Location: scripts/pdf2.py:35
Finding: User-Controlled Output Path Permits Arbitrary PDF File Creation or Overwrite
Content: View full analysis
Remediation: View remediation

T08 · Insecure Dependencies

Note

Location: SKILL.md:31
Finding: Unpinned Playwright and Browser Installation Creates Supply-Chain Exposure
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.