Security audit

Work Productivity Nano Pdf Workflow Helper

Security checks for vulnerabilities and agentic risk

Overview

This is a documentation-only workflow helper with overly broad activation wording but no hidden code, privileged access, persistence, or data exfiltration behavior.

Installers should be aware that this skill may activate too easily for ordinary PDF or editing requests because its triggers are broad and implicit invocation is enabled. It appears safe from a security standpoint, but maintainers should narrow the trigger terms and examples to explicit Nano PDF workflow requests.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (13)

Vague Triggers

High

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The manifest description says to use the skill for broad categories like 'work-productivity', 'pdf', 'edit', and whenever a user 'needs a practical workflow, artifact, checklist, analysis, or implementation support,' which is far too expansive. This ambiguity can lead to accidental invocation across common tasks, degrading routing integrity and increasing the risk that unrelated user requests are handled under incorrect assumptions.
Content: No source excerpt is available for this finding.

Vague Triggers

High

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The trigger list is overly broad, including generic terms like 'nano', 'pdf', 'edit', and 'natural language', which can cause the skill to activate for many unrelated requests. Overbroad activation increases the chance of prompt-routing mistakes, causing the agent to apply irrelevant instructions or expose workflow behavior in contexts where it was not intended.
Content: No source excerpt is available for this finding.

Vague Triggers

High

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The skill description says it should be used for broad categories like work-productivity, nano, pdf, and edit, without clear boundaries on what tasks are in or out of scope. This makes routing ambiguous and can cause accidental invocation on generic requests, expanding the skill's influence beyond its intended domain.
Content: No source excerpt is available for this finding.

Vague Triggers

High

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The trigger list includes very common terms such as "nano", "pdf", "edit", "natural", and "language", which can cause the skill to activate in many unrelated conversations. Over-broad activation increases the chance that this workflow overrides more appropriate skills, injects irrelevant instructions into the model context, and creates unintended behavior pathways.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The trigger sentence is broadly phrased and can match ordinary user requests without enough scope constraints, increasing the chance that the skill activates in contexts the user did not intend. In an agent ecosystem, ambiguous activation can cause the wrong workflow to run, leading to unintended document-processing guidance, confusion, or unsafe chaining with other skills.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: This trigger uses a generic request pattern ('I need a practical workflow for ...') that is too broad to safely distinguish this skill from unrelated user prompts. Such low-specificity routing increases accidental invocation risk, which is especially problematic for productivity skills that may generate procedural actions or artifacts affecting user documents and workflows.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The documented trigger phrases are extremely broad and include generic terms like 'help me', 'practical workflow', and common PDF/editing language, which can cause the skill to activate for ordinary user requests outside its intended scope. In an agent ecosystem, this increases the chance of unintended invocation, prompt-routing mistakes, and execution of the wrong workflow, which can degrade safety and reliability even if it is not directly code-execution related.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 88% confidence
Finding: The example triggers are repetitive, vague, and do not show realistic boundaries or counterexamples, so they fail to constrain activation behavior. Without positive and negative examples, maintainers and routing systems may treat the skill as applicable to loosely related requests, increasing unintended activation risk.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 84% confidence
Finding: 文件名和内容表明该技能是中文（zh-CN）版本，但文档中未说明这是可选语言展示，亦未向用户提供语言选择或切换方式。按组织语言/locale 政策，若技能默认或强制特定语言而无用户选择，可能构成自然语言政策违规。
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The default_prompt is broad, repetitive, and framed as a generic invocation template rather than a narrowly scoped task description. Combined with allow_implicit_invocation=true, this can cause the skill to be selected in contexts where the user only loosely mentions related terms, increasing the chance of unintended activation and inappropriate prompt influence over unrelated tasks.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The trigger section mixes broad keywords like "nano," "pdf," and "edit" with ambiguous example sentences, creating unclear activation boundaries. This makes accidental invocation more likely and can cause the skill to engage on many benign PDF-related requests that are unrelated to the documented requirement, reducing safety and predictability.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The trigger sentence is extremely broad and reads like ordinary user language, which can cause the skill to activate in unrelated conversations that mention generic help or workflow needs. In an agent environment, overbroad activation can route sensitive or unintended tasks into this skill, increasing the chance of incorrect actions, prompt confusion, or misuse of the skill outside its intended scope.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 83% confidence
Finding: This file is presented as a Chinese README, but key descriptive and operational content is written in English, which can effectively force a language choice on users without opt-in. The document does not state that English is optional or provide an explicit language-selection mechanism.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.