PDF Summarizer

Security checks across malware telemetry and agentic risk

Overview

This is a straightforward remote PDF summarizer, but uploaded documents are sent to the provider's API and should be treated as shared with that service.

Install only if you are comfortable sending uploaded PDFs to api.mkkpro.com for processing. Avoid confidential, regulated, legal, medical, financial, or internal business documents unless you have reviewed and accepted the provider's privacy, retention, and security terms.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The skill asks users to upload PDF documents for processing by a third-party API, but it does not clearly warn that document contents leave the local environment and are sent to an external service. This creates a meaningful privacy and data-handling risk, especially because the stated use cases include contracts, research papers, and business documents that may contain sensitive or regulated information.

Vague Triggers

Medium
Confidence
92% confidence
Finding
The API is described as a PDF summarizer but the OpenAPI schema only accepts a generic binary upload in multipart/form-data and does not constrain content type to application/pdf or otherwise document validation requirements. This mismatch can enable arbitrary file uploads to reach backend parsing logic, increasing the risk of unsafe file handling, parser abuse, denial of service, or exploitation of vulnerable document-processing components.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal