Back to skill

Security audit

office-to-pdf

Security checks for vulnerabilities and agentic risk

Overview

This skill is a simple LibreOffice command guide for converting user-chosen Office files to PDF, with no hidden code or data-sharing behavior found.

Install LibreOffice only from trusted package sources, and run the conversion only on documents and output folders you intend to process. Treat untrusted Office files cautiously because document converters can still be exposed to malformed-file risks.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.