Security audit
Security checks for vulnerabilities and agentic risk
The skill describes a proportionate local PDF-compression workflow and discloses software downloads, although its privacy promises depend on external code.
Installation needs internet access. Review and pin the package version before processing sensitive documents; for strict offline handling, provision dependencies first and block networking during processing. Check the compressed PDF’s readability and text-loss warnings before uploading it to your intended portal.
The command's apparent PDF-compression purpose matches the description, but its execution is not reliably offline: npx may contact the npm registry and install missing packages automatically. The supplied chunk does not reveal the package implementation, so document transmission or successful compression cannot be established. There is no direct evidence that the PDF is uploaded.
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
## First: can you run commands on the user's own computer?
The CLI must run where the PDF already is. If you are a chat assistant running in the cloud, or a sandbox without access to the user's files, **do not ask the user to upload the PDF to you**. Uploading it is the risk this tool exists to avoid. Send them to the web page instead:
> **https://mirceamitu.github.io/underlimit/**: open it, drop the PDF in, choose the limit, download the result. It runs entirely in their browser, and nothing is uploaded. They can also save the page and use it offline.
The primary command automatically downloads and executes an unpinned npm package, allowing the code executed to change between runs without review. A compromised package release or dependency could access sensitive PDFs and other files with the user's permissions; the later version-pinning suggestion reduces risk only if followed. This is a CLI supply-chain issue, not an MCP-server issue as the finding's label suggests.
The unconditional statement 'No network access, ever' conflicts with the documented first-run downloads. Although this does not prove document exfiltration, it can cause users or agents handling identity and tax documents to rely on a network-isolation guarantee the workflow does not actually enforce. The explicit download disclosure mitigates, but does not eliminate, this assurance problem.
No suspicious patterns detected.