OkraPDF Public Documents

• Outcome: Review
• Latest audit: May 29, 2026, 9:29 PM
• Version:
  1.0.0

Overview

This skill is mostly a normal remote document-query connector, but it exposes under-scoped page approval/flagging actions and does not clearly warn users what query data goes to OkraPDF.

Install only if you trust OkraPDF with your document questions, document IDs, and API key use. Avoid submitting confidential research or business prompts unless approved, and do not use the SEC verify_pages approve/flag tools unless you are authorized to change shared extraction-quality state.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (2)

Missing User Warnings

Medium

• Confidence: 88% confidence
• Finding: The skill directs users to configure external MCP endpoints and send document identifiers, questions, and potentially extracted content to OkraPDF services, but it does not clearly warn that these prompts and metadata leave the local environment. This can lead to unintentional disclosure of sensitive research interests, internal analysis prompts, or other query content to a third-party service.

External Transmission

Medium

• Category: Data Exfiltration

Content

"mcpServers": {
    "okra-pdf": {
      "type": "url",
      "url": "https://api.okrapdf.com/mcp",
      "headers": { "Authorization": "Bearer YOUR_API_KEY" }
    }
  }

• Confidence: 90% confidence
• Finding: https://api.okrapdf.com/

VirusTotal

65/65 vendors flagged this skill as clean.