Security audit

CAJ转PDF·离线高保真版

Security checks for vulnerabilities and agentic risk

Overview

This CAJ-to-PDF skill is mostly aligned with document conversion, but it uses opaque embedded Windows DLLs, automatic package installation, deletion-control bypasses, and optional system registry changes that need careful review.

Install only if you are comfortable running closed-source native Windows DLLs and network-installed Python packages on local academic files. Avoid using the bundled registry installer, run conversions in a restricted account or disposable environment, and do not process sensitive or untrusted documents without sandboxing.

A.I.G

Vulnerability Patterns

Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Tool Hijacking and SpoofingModifies or replaces tools so legitimate-looking calls execute attacker logic
Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection

Findings (5)

T04 · Embedded Malicious Code

Error

Location: scripts/caj2pdf-restructured/_dll_bundle.py:23
Finding: Encoded native binaries bypass platform controls and execute automatically
Content: View full analysis
Remediation: View remediation

T08 · Insecure Dependencies

Error

Location: scripts/setup.py:26
Finding: Automatic installation of incompletely pinned packages from a third-party mirror
Content: View full analysis
=1.0.0"] build-backend = "pdm.pep517.api" ``` ### Technical Analysis If the expected virtual environment is absent, the normal conversion path invokes `setup.py`, creates a persistent environment under the user's home directory, and installs package artifacts from a third-party Python package mirror. `PyMuPDF` has no version constraint. The build backend is constrained only by a minimum version, and the repository contains no lockfile or artifact hashes. TLS validates transport to the selected mirror but does not guarantee that the resolved package version or wheel is the exact artifact reviewed by the Skill author. Python package installation can execute build backend logic and installs native extension modules. Consequently, compromise of the mirror, a dependency account, dependency ...[truncated 1305 chars]
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Error

Location: scripts/caj2pdf-restructured/caj2pdf/cajparser.py:202
Finding: Predictable shared temporary files allow clobbering and race conditions
Content: View full analysis
Remediation: View remediation

T07 · Tool Hijacking and Spoofing

Error

Location: scripts/caj2pdf-restructured/caj2pdf/cajparser.py:8
Finding: Direct Win32 deletion bypasses the platform safe-delete control
Content: View full analysis
Remediation: View remediation

T05 · Unauthorized Access and Privilege Escalation

Warning

Location: scripts/caj2pdf-restructured/caj2pdf/install.py:5
Finding: Bundled CLI can elevate privileges and install machine-wide shell integration
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger

Findings (89)

Tp4

High

Category: MCP Tool Poisoning
Confidence: 94% confidence
Finding: The documentation claims a high-fidelity offline CAJ/KDH/NH conversion workflow with bundled decoder components, but the analyzed behavior does not substantiate those claims and appears inconsistent with the stated purpose. This kind of description-behavior mismatch is dangerous because users or agents may trust the skill with sensitive academic documents under false assumptions about what code runs, what formats are handled, and whether proprietary components are involved.
Content: No source excerpt is available for this finding.

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 27)May include surrounding context.
md
| DLL | Windows 上 caj2pdf 依赖的闭源解码器；以 base64 内嵌于 `_dll_bundle.py`，运行时提取为 .dll 到 bin 目录 |

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 72)May include surrounding context.
md
| DLL | Windows 上 caj2pdf 依赖的闭源解码器；以 base64 内嵌于 `_dll_bundle.py`，运行时提取为 .dll 到 bin 目录 |

Obfuscated Code

High

Category: Supply Chain
Confidence: 50% confidence
Finding: Code contains obfuscation (base64, hex encoding with execution). This is often used to hide malicious functionality.
Content: Scanner excerpt · scripts/caj2pdf-restructured/_dll_bundle.py (reported line 16)May include surrounding context.
python
] _B64 = { 'libjbigdec-w32.dll': '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 ...[truncated 28 chars]

Obfuscated Code

High

Category: Supply Chain
Confidence: 50% confidence
Finding: Code contains obfuscation (base64, hex encoding with execution). This is often used to hide malicious functionality.
Content: Scanner excerpt · scripts/caj2pdf-restructured/_dll_bundle.py (reported line 17)May include surrounding context.
python
_B64 = { 'libjbigdec-w32.dll': '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 ...[truncated 28 chars]

Intent-Code Divergence

High

Category: Not specified by scanner
Confidence: 99% confidence
Finding: The code explicitly states the platform wraps deletion with a safer recycle-bin mechanism, then deliberately bypasses that safeguard with direct OS-level deletion via kernel32.DeleteFileW or raw os.remove. This defeats sandbox safety controls and can permanently delete files that the host intended to handle more safely, increasing the blast radius of mistakes or abuse.
Content: No source excerpt is available for this finding.

Context-Inappropriate Capability

High

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The code self-elevates via ShellExecuteW with the runas verb and then performs system-wide registry writes affecting file association shell behavior. For a simple offline CAJ-to-PDF converter, privilege escalation and persistent OS integration are excessive and create a dangerous precedent: if the binary or path is replaced or tampered with, the elevated install path can be abused for privileged persistence or unwanted system changes.
Content: No source excerpt is available for this finding.

Known Vulnerable Dependency: PyPDF2==2.2.0 — 2 advisory(ies): CVE-2023-36464 (pypdf and PyPDF2 possible Infinite Loop when a comment isn't followed by a chara); CVE-2023-36464 (pypdf and PyPDF2 possible Infinite Loop when a comment isn't followed by a chara)

High

Category: Supply Chain
Confidence: 97% confidence
Finding: The project pins PyPDF2 to version 2.2.0, which is affected by CVE-2023-36464, a denial-of-service issue where crafted PDF content can trigger an infinite loop during parsing. This skill explicitly processes untrusted document inputs and converts them automatically, so a malicious CAJ/PDF payload could hang the conversion process, consume CPU indefinitely, and disrupt batch workflows or agent availability.
Content: No source excerpt is available for this finding.

Undeclared Tool Scope

Medium

Category: MCP Least Privilege
Confidence: 87% confidence
Finding: The skill instructs the agent to read local files and execute Python scripts, but it does not declare any explicit tool scope or permission boundaries. In agent environments, missing scope declarations can lead to overbroad file and shell access, making unintended execution or access harder to constrain and audit.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The trigger phrase includes broad natural-language wording that could activate the skill in situations where the user did not specifically intend to run a local file-conversion workflow. In an agent setting, overbroad invocation increases the chance of accidental file handling or script execution on the wrong inputs.
Content: No source excerpt is available for this finding.

Intent-Code Divergence

Medium

Category: Not specified by scanner
Confidence: 90% confidence
Finding: The skill markets itself as strictly offline and non-uploading, yet it also references network-based fallback behavior and external source retrieval URLs. This inconsistency can mislead users handling sensitive files into approving a skill they believe never touches the network, increasing the risk of privacy violations or unexpected data exposure.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The invocation examples use ambiguous phrasing that lacks clear scope constraints, which can cause the agent to infer intent too broadly and launch conversion actions without sufficiently precise user direction. While not a code-execution flaw by itself, this weakens safe activation boundaries for a shell-capable skill.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The report content is entirely in Chinese across the operational description and conclusions, with no indication that the user can choose another language. The policy specifically calls for flagging language or locale constraints when they are imposed without user opt-in or documented justification.
Content: No source excerpt is available for this finding.

Sudo/Root Execution

Medium

Category: Privilege Escalation
Confidence: 70% confidence
Finding: Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
Content: Scanner excerpt · scripts/caj2pdf-restructured/README.md (reported line 34)May include surrounding context.
sh
# poppler 库 sudo pacman -S base-devel poppler mupdf-tools pip install caj2pdf-restructured # jbig2dec 库

Sudo/Root Execution

Medium

Category: Privilege Escalation
Confidence: 70% confidence
Finding: Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
Content: Scanner excerpt · scripts/caj2pdf-restructured/README.md (reported line 38)May include surrounding context.
sh
# poppler 库 sudo pacman -S base-devel poppler mupdf-tools pip install caj2pdf-restructured # jbig2dec 库

Sudo/Root Execution

Medium

Category: Privilege Escalation
Confidence: 70% confidence
Finding: Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
Content: Scanner excerpt · scripts/caj2pdf-restructured/README.md (reported line 46)May include surrounding context.
sh
# poppler 库 sudo pacman -S base-devel poppler mupdf-tools pip install caj2pdf-restructured # jbig2dec 库

Sudo/Root Execution

Medium

Category: Privilege Escalation
Confidence: 70% confidence
Finding: Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
Content: Scanner excerpt · scripts/caj2pdf-restructured/README.md (reported line 50)May include surrounding context.
sh
# poppler 库 sudo pacman -S base-devel poppler mupdf-tools pip install caj2pdf-restructured # jbig2dec 库

Sudo/Root Execution

Medium

Category: Privilege Escalation
Confidence: 70% confidence
Finding: Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
Content: Scanner excerpt · scripts/caj2pdf-restructured/README.md (reported line 58)May include surrounding context.
sh
# poppler 库 sudo pacman -S base-devel poppler mupdf-tools pip install caj2pdf-restructured # jbig2dec 库

Sudo/Root Execution

Medium

Category: Privilege Escalation
Confidence: 70% confidence
Finding: Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
Content: Scanner excerpt · scripts/caj2pdf-restructured/README.md (reported line 66)May include surrounding context.
sh
# poppler 库 sudo pacman -S base-devel poppler mupdf-tools pip install caj2pdf-restructured # jbig2dec 库

Context-Inappropriate Capability

Medium

Category: Not specified by scanner
Confidence: 89% confidence
Finding: The README documents a caj2pdf install command that adds a Windows context-menu integration by modifying the registry, which is a persistent system change beyond core file-conversion behavior. In the skill context, this is more concerning because the broader skill description emphasizes one-click automation and embedded binary components, so undocumented or weakly justified persistence-related capabilities increase the attack surface and user surprise.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The README mentions installing registry entries for right-click conversion, then immediately notes that uninstall will not clean them up, but it does not clearly warn users before invocation that this change is persistent. Persistent OS-level modification without strong advance notice can mislead users and makes abuse easier if this capability is triggered in an automated agent workflow.
Content: No source excerpt is available for this finding.

Whitespace Padding

Medium

Category: Prompt Injection
Confidence: 80% confidence
Finding: Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
Content: Scanner excerpt · scripts/caj2pdf-restructured/_dll_bundle.py (reported line 16)May include surrounding context.
python
] _B64 = { 'libjbigdec-w32.dll': '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 ...[truncated 28 chars]

Whitespace Padding

Medium

Category: Prompt Injection
Confidence: 80% confidence
Finding: Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
Content: Scanner excerpt · scripts/caj2pdf-restructured/_dll_bundle.py (reported line 16)May include surrounding context.
python
] _B64 = { 'libjbigdec-w32.dll': 'TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAA4fug4AtAnNIbgBTM0hVGhpcyBwcm9ncmFtIGNhbm5vdCBiZSBydW4gaW4gRE9TIG1vZGUuDQ0KJAAAAAAAAABQRQAATAESAJrM9l8AngAAcQMAAOAABiELAQIiACIAAABaAAAABAAAsBMAAAAQAAAAQAAAAACEYgAQAAAAAgAABAAAAAEAAAAEAAAAAAAAAACAAQAABgAAFdgBAAMAAAAAACAAABAAAAAAEAAAEAAAAAAAABAAAAAAkAAAuQIAAACgAACUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAAADACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYYAAAGAAAAAAAAAAAAAAAAAAAAAAAAADcoAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC50ZXh0AAAA1CAAAAAQAAAAIgAAAAYAAAAAAAAAAAAAAAAAAGAAUGAuZGF0YQAAAEgQAAAAQAAAABIAAAAoAAAAAAAAAAAAAAAAAABAAGDALnJkYXRhAAA4BgAAAGAAAAAIAAAAOgAAAAAAAAAAAAAAAAAAQAAwQC80AAAAAAAAiAoAAABwAAAADAAAAEIAAAAAAAAAAAAAAAAAAEAAMEAuYnNzAAAAANQDAAAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAGDALmVkYXRhAAC5AgAAAJAAAAAEAAAATgAAAAAAAAAAAAAAAAAAQAAwQC5pZGF0YQAAlAQAAACgAAAABgAAAFIAAAAAAAAAAAAAAAAAAEAAMMAuQ1JUAAAAACwAAAAAsAAAAAIAAABYAAAAAAAAAAAAAAAAAABAADDALnRscwAAAAAIAAAAAMAAAAACAAAAWgAAAAAAAAAAAAAAAAAAQAAwwC5yZWxvYwAAMAIAAADQAAAABAAAAFwAAAAAAAAAAAAAAAAAAEAAMEIvMTQAAAAAAFgAAAAA4AAAAAIAAABgAAAAAAAAAAAAAAAAAABAAEBCLzI5AAAAAACiIgAAAPAAAAAkAAAAYgAAAAAAAAAAAAAAAAAAQAAQQi80MQAAAAAAWwQAAAAgAQAABgAAAIYAAAAAAAAAAAAAAAAAAEAAEEIvNTUAAAAAACIFAAAAMAEAAAYAAACMAAAAAAAAAAAAAAAAAABAABBCLzY3AAAAAAA4AAAAAEABAAACAAAAkgAAAAAAAAAAAAAAAAAAQAAwQi84MAAAAAAAXwEAAABQAQAAAgAAAJQAAAAAAAAAAAAAAAAAAEAAEEIvOTEAAAAAAEsEAAAAYAEAAAYAAACWAAAAAAAAAAAAAAAAAABAABBCLzEwMgAAAACIAAAAAHABAAACAAAAnAAAAAAAAAAAAAAAAAAAQAAQQgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA ...[truncated 28 chars]

Whitespace Padding

Medium

Category: Prompt Injection
Confidence: 80% confidence
Finding: Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
Content: Scanner excerpt · scripts/caj2pdf-restructured/_dll_bundle.py (reported line 17)May include surrounding context.
python
] _B64 = { 'libjbigdec-w32.dll': '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 ...[truncated 28 chars]

Whitespace Padding

Medium

Category: Prompt Injection
Confidence: 80% confidence
Finding: Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
Content: Scanner excerpt · scripts/caj2pdf-restructured/_dll_bundle.py (reported line 16)May include surrounding context.
python
] _B64 = { 'libjbigdec-w32.dll': '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 ...[truncated 28 chars]

Static analysis

Detected: suspicious.obfuscated_code

Potential obfuscated payload detected.

Warn

Code: suspicious.obfuscated_code
Location: scripts/caj2pdf-restructured/caj2pdf/pdfwutils.py:1510