T08 · Insecure Dependencies
Warning
- Location
SKILL.md:4- Finding
Unpinned Third-Party CLI Installation
- Content
View full analysis
- Remediation
View remediation
Security audit
Pdf2md
Security checks for vulnerabilities and agentic risk
Overview
This PDF conversion skill is coherent, but it can upload local PDFs to an external service under broad triggers without a clear consent step.
Install only if you are comfortable with PDFs being processed by MinerU's external API. Avoid using it on confidential, regulated, privileged, or personal documents unless you are authorized to disclose them, and prefer a local-only converter for sensitive files. Treat the CLI install as mutable third-party code unless you pin and review a specific version yourself.
Vulnerability Patterns
- Insecure DependenciesIntroduces malicious components through unsafe dependency sources
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (2)
other
Warning
- Location
SKILL.md:17- Finding
PDF Upload to an External Service Without an Explicit Consent Gate
- Content
View full analysis
- Remediation
View remediation
Vulnerability Patterns
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 90% confidence
- Finding
The skill's 'When to Use' section uses very broad trigger phrases such as 'read', 'extract', 'convert', 'parse', 'summarize', or 'analyze' a PDF, which can match a wide range of ordinary user requests. This increases the chance the agent will invoke the skill automatically and send local files or remote URLs to an external API without sufficiently explicit user intent or data-sensitivity checks.
- Content