Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed Foxit PDF-to-Word automation guide, with ordinary file-conversion risks but no evidence of hidden or malicious behavior.
Install only if you use Windows with the Chinese Foxit UI and are comfortable with GUI automation. Before batch conversion, choose an output folder carefully and back up or rename any existing .docx files that might share the same output names. Also note that the inspected package does not include the referenced PowerShell script, so it may be incomplete as published.
The documentation states that the system language must be Chinese because the menu shortcut mapping is based on the Chinese version. This is a language/locale constraint presented as mandatory, with no user choice or explicit justification that the skill is intended only for a China-specific environment.
The skill explicitly pastes a full output path into Foxit's save field and states this is done to avoid the 'file already exists' prompt, but it does not clearly warn users that an existing .docx at that path may be replaced. In a file-conversion workflow, silent overwrite behavior can cause unintended data loss, especially during batch runs or when output names are customized.
No suspicious patterns detected.
