ClawHub
Back to skill

Security audit

pandoc-document-converter

Security checks across malware telemetry and agentic risk

Overview

This skill is for document conversion, but its instructions mix local file/command processing with unclear external API use, which could confuse users about where sensitive documents go.

Review this before installing if you handle confidential documents. Use it only when you are comfortable with both local command execution and possible external API processing, and avoid sensitive files unless the publisher clarifies whether conversion is local-only or what remote service receives the data.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Description-Behavior Mismatch

Medium
Confidence
93% confidence
Finding
The skill repeatedly presents itself as an external API wrapper/RESTful service while the rest of the document describes local Pandoc-style file processing and command execution. This mismatch can mislead users and orchestrators about where data goes, what trust boundary applies, and whether documents may be sent off-host or processed locally, creating a real security-relevant deception risk.

Vague Triggers

Medium
Confidence
78% confidence
Finding
Overly broad activation guidance increases the chance that the skill will be invoked for inappropriate or sensitive document tasks without adequate user awareness. In a skill with read/exec/write capabilities and ambiguous local-vs-remote processing claims, over-triggering can expose confidential files or cause unintended command-driven processing.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The description promotes external API usage and file-processing workflows but does not clearly disclose that user documents may be transmitted to a remote service. For document-conversion tasks, inputs often contain sensitive business or personal content, so failing to warn about remote transmission creates a significant confidentiality and compliance risk.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.