ClawHub
Back to skill

Security audit

Deckrun Pdf Generator Free

Security checks for vulnerabilities and agentic risk

Overview

This skill coherently describes a free Markdown-to-PDF service, with the main risk being that submitted content is sent to a third-party service and exposed through a public 90-day PDF link.

Install only if you are comfortable sending the Markdown you provide to AgenticDecks and receiving a public PDF link that remains valid for 90 days. Do not use it for secrets, private business documents, personal data, or regulated content unless that exposure is acceptable.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
97% confidence
Finding
The skill explicitly sends user-provided Markdown to a third-party service and returns a public URL valid for 90 days, but it does not clearly warn users about this data transfer and public exposure at the point of use. This creates a real risk of users submitting sensitive, proprietary, or regulated content under the mistaken assumption that processing is local or private.

Static analysis

No suspicious patterns detected.