Security audit
Pandoc Convert
Security checks across malware telemetry and agentic risk
Overview
This appears to be a benign pandoc document-conversion guide, though it references helper files that are not included in the reviewed package.
Safe to install as a pandoc usage guide. Before running any referenced helper script or batch command, confirm the script actually exists from a trusted source and review what paths it will read or overwrite.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.