ClawHub
Back to skill

Security audit

Pandoc Convert Tool Free

Security checks across malware telemetry and agentic risk

Overview

This is a document-conversion skill whose read, write, and command use fit its stated Pandoc purpose, but users should choose paths carefully because conversions can create or overwrite files.

Install only if you are comfortable letting the agent read documents, run Pandoc locally, and write converted files. Give explicit input and output paths, avoid converting untrusted documents outside a sandbox, and confirm before overwriting existing files.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Output HandlingUnvalidated Output Injection, Cross-Context Output, Unbounded Output
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Vague Triggers

Medium
Confidence
77% confidence
Finding
The skill uses very broad natural-language activation examples without defining clear scope, preconditions, or refusal boundaries. In an agent environment with read/write/exec tools, ambiguous invocation can cause the agent to perform unintended file conversions or command-driven actions on user data without sufficiently explicit confirmation.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The skill advertises document conversion but does not clearly warn that it may invoke local commands and write or overwrite files. In a tool-enabled agent, that omission increases the chance of unsafe user expectations, accidental data loss, or unauthorized modification of local content when the skill is triggered.

Unvalidated Output Injection

High
Category
Output Handling
Content
def convert(input_file, output_format, output_file=None):
    if output_file is None:
        output_file = input_file.rsplit(".", 1)[0] + "." + output_format
    result = subprocess.run([
        "pandoc", input_file,
        "-o", output_file,
        "--standalone"
Confidence
89% confidence
Finding
subprocess.run([ "pandoc", input_file, "-o", output_file, "--standalone" ], capture_output

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.