PDF Reader (Iyeque)
Security checks across malware telemetry and agentic risk
Overview
This skill is a straightforward local PDF reader that opens a user-supplied PDF and prints extracted text or metadata.
This appears safe to install for local PDF text and metadata extraction. Only run it on PDFs you intend the agent to read, because extracted text and document metadata may contain sensitive information, and consider pinning PyMuPDF if reproducible or high-security installs matter.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.