Security audit

Doc Structurer

Security checks across malware telemetry and agentic risk

Overview

This skill structures user-provided parsed documents into a local JSON file, with disclosed but separate downstream Notion and calendar handoff considerations.

Install only if you trust the publisher and intend to process the selected parsed document files. Review structured_results.json before passing it to Notion, Apple Calendar, or any other sync skill, especially for contracts, invoices, personal data, or confidential business records.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (4)

Description-Behavior Mismatch

Medium

Confidence: 92% confidence
Finding: The prompt defines this skill as a document-structuring component, but then explicitly prepares output for downstream Notion database storage and calendar registration. That expands the effective operational scope from passive analysis into enabling external persistence and scheduling actions, which can cause unintended data propagation or side effects if users are not clearly informed and consent is not enforced.

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: The skill explicitly states that structured document data will be sent to Notion and calendar data may be synced to Apple Calendar, but it provides no privacy warning, consent step, data minimization guidance, or handling rules for potentially sensitive document contents. Because this skill processes contracts, official documents, invoices, and other business records, silent propagation to external services can expose confidential or personal data to third-party platforms.

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: The prompt states that results are passed to Notion DB and Apple Calendar, but provides no warning, consent mechanism, or confirmation step for external transmission of potentially sensitive document-derived data. In this context, the skill processes business documents that may contain names, dates, financial details, and internal references, so silent downstream syncing materially increases privacy and integrity risk.

Missing User Warnings

Medium

Confidence: 94% confidence
Finding: The prompt directs the agent to immediately execute processing on a user-supplied file or folder path, which can cause bulk ingestion of potentially sensitive document contents and metadata without explicit user confirmation, scope limitation, or privacy notice. In a document-processing pipeline that extracts summaries, recipients, dates, financial fields, and metadata into JSON for downstream syncing, this increases the risk of unintended data collection and propagation.

VirusTotal

67/67 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.prompt_injection_instructions

Prompt-injection style instruction pattern detected.

Warn

Code: suspicious.prompt_injection_instructions
Location: system-prompt.md:1