Security audit

Work Productivity Nano Pdf Workflow Helper

Security checks for vulnerabilities and agentic risk

Overview

This is a documentation-only workflow helper with overly broad activation wording but no evidence of hidden execution, data access, persistence, or destructive behavior.

Before installing, understand that this skill may be selected for generic PDF or editing requests because its trigger terms are broad. It is otherwise a low-risk documentation helper; maintainers should narrow the keywords and trigger examples to explicit Nano PDF workflow tasks.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (11)

Vague Triggers

High

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The manifest description says to use the skill when a user asks for broad categories like 'work-productivity', 'nano', 'pdf', 'edit', or any 'practical workflow, artifact, checklist, analysis, or implementation support'. Such expansive invocation criteria can make the skill eligible for a large range of unrelated requests, increasing misrouting risk and allowing the skill to influence conversations it was not designed to handle.
Content: No source excerpt is available for this finding.

Vague Triggers

High

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The trigger list includes very common terms such as 'nano', 'pdf', 'edit', 'natural', and 'language', which are likely to match unrelated user requests. This can cause the skill to activate outside its intended scope, leading to unintended routing, over-broad interception of user tasks, and reduced trust in agent behavior.
Content: No source excerpt is available for this finding.

Vague Triggers

High

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The trigger list includes very generic terms such as "nano", "pdf", "edit", "natural", and "language", which can match many unrelated user requests and cause accidental invocation. In an agent environment, over-broad triggering can route sensitive or irrelevant tasks into the wrong skill, producing incorrect actions, confused automation, or unsafe processing of documents the user did not intend this skill to handle.
Content: No source excerpt is available for this finding.

Vague Triggers

High

Category: Not specified by scanner
Confidence: 98% confidence
Finding: The trigger sentence begins with a very broad phrase ('Help me') tied to generic productivity/PDF terms, which can cause the skill to activate for many unrelated user requests. In an agent environment, overly broad activation increases the chance of unintended routing, causing the model to apply this skill in contexts it was not designed for and potentially mishandle user intent or sensitive documents.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The keyword list contains broad terms like 'work-productivity', 'nano', 'pdf', 'edit', 'natural', and 'language', which are common across many benign requests. This broad scope can cause overmatching in discovery or auto-selection systems, making the skill activate outside its intended use and increasing the attack surface for prompt-routing abuse or unintended tool usage.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The trigger examples are generic natural-language requests that can match ordinary user prompts unrelated to this specific skill. In an agent ecosystem, this increases the chance of unintended activation or routing, causing the skill to intercept tasks it was not meant to handle and potentially influence workflows unexpectedly.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: This markdown file defines activation text under '触发句' using broad natural-language phrases such as 'Help me' and 'I need a practical workflow'. Those phrases overlap with ordinary conversation and the file does not provide scope limits or negative examples clarifying when the skill should or should not activate.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 90% confidence
Finding: The example trigger phrases are vague restatements of the description and do not define meaningful boundaries for when the skill should or should not be used. Without precise examples and counterexamples, downstream routing systems or maintainers may overgeneralize activation and invoke the skill in unrelated contexts.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 88% confidence
Finding: The description says the skill should be used for broad categories like work-productivity, nano, pdf, and edit, without clearly bounding what tasks are in scope. This ambiguity increases the chance that orchestration logic or users invoke the skill in contexts it was not designed for, which can degrade reliability and lead to incorrect handling of user requests.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The default prompt is framed as a broad, natural-language invocation template and the skill also allows implicit invocation, which increases the chance the agent will activate this skill on ordinary user wording rather than clear opt-in. That can cause unintended routing, prompt-scope expansion, or interference with other agent behaviors, especially because the skill claims applicability to generic workflow, checklist, analysis, and implementation requests.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 77% confidence
Finding: The file is a zh-CN README, but its listed trigger phrases are only in English and presented as the activation wording. This can impose a language-specific interaction pattern without documenting user choice or opt-in.
Content: No source excerpt is available for this finding.