The Agent Skills Directory

[DYNAMIC_EXECUTION]: The skill utilizes pickle.loads() within pdf2zh/pdfinterp.py to load font character map (CMap) data. Although the implementation includes a whitelist and regular expression validation to restrict file paths to the application's internal directories, pickle is an inherently unsafe deserialization method that can be exploited for arbitrary code execution if the local file system or the bundled assets are modified by an attacker.
[PRIVILEGE_ESCALATION]: The application's update process in app/update.py generates and executes a PowerShell script using powershell.exe -ExecutionPolicy Bypass. This bypasses standard system security execution policies to perform sensitive file operations, such as replacing application binaries in directories that may require elevated permissions.
[COMMAND_EXECUTION]: Multiple components spawn subprocesses to manage system interactions. This includes app/gui.py for launching browsers and file explorers, pdf2zh/installed_browser.py for automating user verification sessions for CAPTCHA resolution, and app/update.py for the self-update logic. These calls rely on parameters derived from the local environment, which increases the attack surface for potential command manipulation.
[EXTERNAL_DOWNLOADS]: The skill is designed to download and execute code and assets at runtime. This includes application updates from the author's GitHub repository (app/update.py) and various AI models and fonts required for layout detection and OCR (scripts/fetch_assets.py). While the sources are associated with the vendor's known repository, this runtime modification of application components represents a significant security risk.
[INDIRECT_PROMPT_INJECTION]: As a tool that parses and processes untrusted PDF files from the local file system, the skill presents an ingestion surface for indirect prompt injection. Maliciously crafted documents could attempt to influence the agent's behavior through the extracted text, especially if the output is used in subsequent automated decision-making workflows.

pdf-translate