Security audit
Fill XFA PDF Forms
Security checks for vulnerabilities and agentic risk
Overview
This is a local PDF form-filling helper whose behavior matches its stated purpose, with ordinary caution needed for sensitive form data.
Install pikepdf only in a trusted Python environment. Avoid sharing terminal logs or transcripts when filling sensitive forms because the tool can echo entered field values after writing the PDF.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.