ClawHub
Back to skill

Security audit

OkraPDF Public Documents

Security checks for vulnerabilities and agentic risk

Overview

This skill is mostly a normal remote document-query connector, but it exposes under-scoped page approval/flagging actions and does not clearly warn users what query data goes to OkraPDF.

Install only if you trust OkraPDF with your document questions, document IDs, and API key use. Avoid submitting confidential research or business prompts unless approved, and do not use the SEC verify_pages approve/flag tools unless you are authorized to change shared extraction-quality state.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
88% confidence
Finding
The skill directs users to configure external MCP endpoints and send document identifiers, questions, and potentially extracted content to OkraPDF services, but it does not clearly warn that these prompts and metadata leave the local environment. This can lead to unintentional disclosure of sensitive research interests, internal analysis prompts, or other query content to a third-party service.

External Transmission

Medium
Category
Data Exfiltration
Content
"mcpServers": {
    "okra-pdf": {
      "type": "url",
      "url": "https://api.okrapdf.com/mcp",
      "headers": { "Authorization": "Bearer YOUR_API_KEY" }
    }
  }
Confidence
90% confidence
Finding
This skill configures a remote MCP server at api.okrapdf.com and includes bearer-token authentication, which means user requests are transmitted to a third-party service. In context, network access is expected for the product to function, but the security issue is the absence of clear disclosure and guardrails around what data will be sent externally.

Static analysis

No suspicious patterns detected.