Security audit

Doc2md

Security checks for vulnerabilities and agentic risk

Overview

The skill is for document conversion, but it directs users to send bearer-token-protected document traffic over plaintext HTTP and claims bundled binaries that are not present in the artifact.

Review before installing. Only use this with a trusted HTTPS doc2md endpoint, avoid sensitive documents unless the service's retention and privacy posture are acceptable, prefer environment variables or a secure secret store over plaintext config, and verify the missing CLI binaries/source before running anything.

A.I.G

Vulnerability Patterns

Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T09 · Insecure Skill Coding Practices

Error

Location: SKILL.md:42
Finding: Bearer Token and Document Data Transmitted Over Plaintext HTTP
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The skill explicitly states that conversion occurs through a platform API, which means local document contents are transmitted off-host, but it does not clearly warn users that sensitive file data leaves the local system. This can cause users to submit confidential PDFs, DOCX, or PPTX files under the mistaken assumption that the tool is purely local, leading to unintended data disclosure to the remote service at the configured API endpoint.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.