Smart PDF Reader

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:35 PM UTC
• Version:
  0.2.0

Overview

This skill is a straightforward PDF extraction helper, but users should be aware it relies on a third-party CLI/API and may save extracted document content locally.

Before installing, verify the mineru-open-api npm package/source. Avoid using it on confidential PDFs unless MinerU's privacy and retention practices are acceptable, prefer stdout mode for quick reads, and choose or clean output directories deliberately.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

• Confidence: 93% confidence
• Finding: The trigger phrases are broad enough to match many ordinary requests about opening, reading, or summarizing documents, which increases the chance the skill is invoked when the user did not specifically intend to use this tool. Because the skill can then process user-supplied files and potentially call external tooling, accidental invocation expands the attack surface and may cause unintended document handling or data disclosure to the extraction service.

Missing User Warnings

Medium

• Confidence: 89% confidence
• Finding: The skill explicitly directs writing extracted content into a generated output directory but does not warn the user that local filesystem artifacts will be created and retained. This can leave sensitive PDF contents, OCR text, tables, or derived Markdown on disk unexpectedly, creating confidentiality and retention risks on shared or persistent environments.

VirusTotal

65/65 vendors flagged this skill as clean.