ClawHub

Pdf Highlight Extractor

Security checks across malware telemetry and agentic risk

Overview

This skill appears to do what it says: extract highlights from a user-provided PDF and create a Markdown notes file.

Before installing, consider that the skill will read the selected PDF's highlighted text, ask the AI to summarize it, install PyMuPDF if needed, and create a Markdown file in the same directory as the PDF. Avoid using it on confidential PDFs in shared, synced, or version-controlled folders unless that output location is acceptable.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
76% confidence
Finding
The trigger phrases are broad enough that ordinary requests such as '生成读书笔记' or '整理标注' could invoke the skill unexpectedly. Mis-triggering a skill with shell and file-write capabilities can cause unintended processing of user files and creation of output files without sufficiently explicit user intent.

Missing User Warnings

Medium
Confidence
87% confidence
Finding
The skill writes a Markdown file into the same directory as the source PDF without prominently warning the user or asking for confirmation. This can leak extracted sensitive content into synced/shared folders, modify user workspaces unexpectedly, or create artifacts in directories where write side effects are undesirable.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal