ClawHub
Back to skill

Security audit

Generate PDF from HTML

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward PDF-generation API wrapper, but users should understand that submitted HTML or URLs are processed by an external service.

Before installing, treat this as a third-party PDF rendering integration: HTML, CSS, dynamic parameters, public URLs, and generated PDFs may be sent to or stored by pdfapihub.com. Do not use it for secrets, internal-only URLs, regulated personal data, contracts, invoices, or customer records unless that provider is approved for your data.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (6)

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The skill directs users to send raw HTML content or public URLs to a third-party PDF rendering service but does not clearly warn that document contents, embedded data, and requested URLs will be transmitted to and processed by an external provider. This can cause unintentional disclosure of sensitive business, personal, or regulated data, especially because the listed use cases include invoices, contracts, receipts, certificates, and reports.

External Transmission

Medium
Category
Data Exfiltration
Content
## Example Usage
```bash
curl -X POST https://pdfapihub.com/api/v1/generatePdf \
  -H "CLIENT-API-KEY: your_api_key" \
  -H "Content-Type: application/json" \
  -d '{
Confidence
92% confidence
Finding
The example shows direct transmission of user-supplied HTML and related content to an external API endpoint, which is expected for the feature but still constitutes a real data-exfiltration risk if operators use it on sensitive material. Because the skill supports dynamic parameter substitution and business-document use cases, users may embed customer, financial, or contractual data and send it off-platform without adequate awareness.

Autonomous Decision Making

Medium
Category
Excessive Agency
Content
## Notes
- Boolean fields accept string values: `"true"`, `"1"`, `"yes"`, `"on"`
- Files are automatically deleted after 30 days
- Page count limits are tier-dependent
Confidence
80% confidence
Finding
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The skill sends user-supplied HTML content or URLs to a third-party external API for PDF generation, but the manifest provides no user-facing disclosure about data sharing, retention, or privacy implications. This can expose sensitive document contents, embedded secrets, or internal links to an external service without informed user consent, which is especially risky if users assume processing is local or first-party.

Vague Triggers

Low
Confidence
80% confidence
Finding
This JSON shows a request/response example for generating PDFs, but it provides no explicit trigger phrases, activation conditions, or exclusions describing when the skill should run. For manifest-like files, the absence of trigger specificity can lead to overly broad or unintended invocation if this file is used as part of skill definition or documentation.

Natural-Language Policy Violations

Low
Confidence
0% confidence
Finding
No natural-language language or locale policy violations were identified in this file.

Static analysis

No suspicious patterns detected.