paperless-ngx-tools

• Outcome: Pass
• Latest audit: May 27, 2026, 9:13 PM
• Version:
  1.0.2

Overview

This skill is a straightforward Paperless-ngx integration, but it can access and modify your document archive when you run its commands.

Install this only if you are comfortable letting an agent use your Paperless-ngx token to read documents, upload files, and create metadata. Use a least-privilege Paperless account if possible, prefer HTTPS for remote instances, explicitly approve any advanced API update/delete/bulk operation, and pass a safe --output path when downloading files.

SkillSpector

By NVIDIA

Vulnerability Patterns

• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Description-Behavior Mismatch

Medium

• Confidence: 96% confidence
• Finding: The script supports creating new document types via the `--create` flag, which goes beyond the declared skill scope of only searching, uploading, tagging, and retrieving documents. This is dangerous because it expands the agent's effective write capabilities in the Paperless-ngx instance, enabling unauthorized taxonomy changes and violating least-privilege expectations users may rely on when granting access.

VirusTotal

64/64 vendors flagged this skill as clean.