PDF To PPTX

Security checks across malware telemetry and agentic risk

Overview

This is a straightforward PDF-to-PowerPoint API skill, with the main caution that uploaded PDFs and converted files are handled by an external service.

Install only if you are comfortable sending PDFs to api.mkkpro.com for conversion. Avoid confidential, regulated, legal, financial, medical, or personal documents unless the provider's privacy, retention, deletion, and download-link security practices are acceptable for that data.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The skill instructs users to upload raw PDF content to a third-party API and shows that the service returns a hosted download URL, but it does not warn users that document contents leave the local environment and may be stored or exposed externally. This creates a real privacy and data-handling risk, especially for sensitive PDFs containing business, legal, financial, or personal information.

External Transmission

Medium
Category
Data Exfiltration
Content
"output_file": "document_converted.pptx",
  "pages_processed": 12,
  "conversion_time_ms": 2450,
  "file_url": "https://api.mkkpro.com/files/abc123def456/document_converted.pptx"
}
```
Confidence
91% confidence
Finding
https://api.mkkpro.com/

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal