Security audit

hwp-reader

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward Korean HWP/HWPX document reader, with ordinary dependency and resource-limit cautions but no hidden, destructive, or data-stealing behavior found.

Install this only if you need Korean HWP/HWPX text extraction. Use a virtual environment, pin or review `pyhwp` before installing, and avoid feeding very large or untrusted HWPX files unless the runner has memory, CPU, and output limits.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (2)

T08 · Insecure Dependencies

Warning

Location: SKILL.md:58
Finding: Unpinned Third-Party Dependency Installation
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Warning

Location: SKILL.md:30
Finding: Unbounded Decompression and XML Parsing of Untrusted HWPX Files
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (2)

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The 'When to Use' section includes broad triggers such as 'Any Korean document in Hangul Word Processor format,' which lacks specificity about context, intent, or exclusions. This can cause unintended invocation whenever a user mentions a .hwp/.hwpx file, rather than only when they explicitly want extraction or analysis.
Content: No source excerpt is available for this finding.

Ssd 3

Low

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The hardcoded absolute path reveals the author's local username and Python environment layout, which is unnecessary for skill operation and can leak host-specific information into prompts, logs, or downstream outputs. While low severity on its own, such details can aid environment fingerprinting and targeted social engineering or chaining with other weaknesses.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.