ClawHub
Back to skill

Security audit

Pdf Reader Cn

Security checks across malware telemetry and agentic risk

Overview

This is a local PDF reader/analyzer that reads user-provided PDFs and prints extracted content, with no evidence of network access, credential use, or hidden persistence.

Install only if you are comfortable with a local script reading the PDFs you pass to it and printing extracted text/metadata to the terminal. Use a trusted Python environment and be careful with sensitive PDFs because console output may be saved in shell history, logs, or shared sessions.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
89% confidence
Finding
This code prints the PDF path, metadata, and a first-page text preview directly to stdout. For a code file, exposing potentially sensitive document contents should have some user-facing disclosure or warning, and the current docstrings/comments only say the file will be analyzed, not that extracted content and metadata will be displayed.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal