pdf-processor

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill includes an explicit plaintext password example and shows passing a password via a command-line flag (e.g., --password 123456), which is an insecure pattern that encourages embedding secrets verbatim in commands/outputs.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). 在 MinerU/PaddleOCR 外部 OCR 结果解析与叠层链路中，运行时会把外部服务返回的“识别文本（free text）+坐标（poly）”写入本地 PDF（如 _parse_rec_dict / parse_paddle_predict_result → apply_page_entries_as_layered_pdf / _insert_text_blocks），而这些文本可由上传的用户材料间接诱导，属于外部非第一方作者内容的可读自由文本摄取路径。