ClawHub
Back to skill

Security audit

Document Pdf Tool Free

Security checks across malware telemetry and agentic risk

Overview

This is a local PDF-processing skill with expected file and command permissions, with one caution around an optional but under-specified callback URL.

Install only if you are comfortable letting the agent read PDFs, create or overwrite output files, and run local PDF/OCR-related commands. Avoid using callback_url unless you control and trust the endpoint, because the skill does not define what callback data would contain.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Behavioral ASTexec() Call, eval() Call, Dynamic Import
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Context-Inappropriate Capability

Medium
Confidence
93% confidence
Finding
The skill is primarily described as a local PDF-processing tool, yet it documents a callback_url for asynchronous completion notifications without constraining destination, transport, or data content. That creates an unexpected network egress path through which document metadata or results could be sent to external systems, increasing privacy and data-leak risk for sensitive PDFs.

Missing User Warnings

Medium
Confidence
88% confidence
Finding
The skill advertises write and exec capabilities for a document-processing workflow but does not prominently warn that it may modify files or execute commands on the host. In an agent context, this can lead users to authorize operations that overwrite documents, create arbitrary outputs, or invoke shell-based processing with broader system impact than expected.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
Documenting callback URL support without a privacy warning normalizes sending processing status or results to arbitrary external endpoints. Because PDFs often contain sensitive personal or business information, even metadata or extracted text sent via callback can expose confidential data or enable exfiltration.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.