Back to skill

Security audit

Markdown to PDF (CJK)

Security checks for vulnerabilities and agentic risk

Overview

This is a straightforward local Markdown-to-PDF helper, and the reviewed artifacts do not show hidden access, persistence, network use, or destructive behavior.

Install this if you want a local Markdown-to-PDF workflow with CJK rendering. It processes document content locally through Python and WeasyPrint, so use normal care with sensitive or untrusted Markdown, especially if the document contains raw HTML or external references.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.