Extract PDF Text

• Outcome: Pass
• Latest audit: May 28, 2026, 1:49 AM
• Version:
  1.0.2

Overview

This skill is a local PDF text-extraction guide; the main cautions are installing PDF/OCR dependencies and not copying example passwords into real code.

Install only if you need local PDF text extraction. Use a virtual environment when installing Python packages, trust your package sources, run OCR system-package commands only if needed, and replace example passwords with prompted or otherwise protected credential handling in real code.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 93% confidence
• Finding: This markdown file contains code examples that embed a plaintext password value (`"secret123"`) for opening and authenticating a protected PDF. The surrounding documentation does not warn users against hardcoding secrets or explain safer credential handling, which can normalize insecure handling of sensitive data.

VirusTotal

64/64 vendors flagged this skill as clean.