ClawHub
Back to skill

Security audit

PDF to Word Review

Security checks for vulnerabilities and agentic risk

Overview

The skill’s PDF conversion purpose is coherent, but it recommends installing its engine directly from an unpinned GitHub repository.

Review the GitHub repository before installing and prefer a pinned package release, immutable commit, or hash-verified artifact when available. The skill appears focused on local PDF conversion, but its current install guidance asks your agent to run mutable remote code.

SkillSpector

Vulnerability Patterns
  • YARA SignaturesMalware Match, Webshell Match, Cryptominer Match
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

YARA rule 'agent_skill_remote_bootstrap_execution': Remote script or code download followed by execution/bootstrap installation [agent_skills]

High
Category
YARA Match
Content
## Quick start

```bash
pip install git+https://github.com/xiyanjun/pdf-to-word-review.git
pdf2word input.pdf -o output.docx --verify --html
```
Confidence
92% confidence
Finding
The README instructs users to install and execute code directly from a GitHub repository via `pip install git+https://...`, which bypasses the stronger immutability and review guarantees of pinned, packaged releases. If the upstream repository, account, branch, or dependency chain is compromised, users of the skill could fetch and run attacker-controlled code during installation.

YARA rule 'agent_skill_remote_bootstrap_execution': Remote script or code download followed by execution/bootstrap installation [agent_skills]

High
Category
YARA Match
Content
pip install pdf2word-review

# Option 2: GitHub direct install (works today, recommended)
pip install git+https://github.com/xiyanjun/pdf-to-word-review.git
```

Only four lightweight core dependencies are pulled in automatically (pdf2docx, PyMuPDF, python-docx, lxml). OCR is optional — see "Scanned PDF OCR".
Confidence
96% confidence
Finding
The skill recommends `pip install git+https://github.com/xiyanjun/pdf-to-word-review.git`, which installs code directly from a remote GitHub repository at execution time without pinning to a specific commit, tag, or hash. This creates a software supply-chain risk: repository compromise, force-pushed changes, or dependency drift could result in arbitrary code being installed and executed on the user's system.

Static analysis

No suspicious patterns detected.