pdf

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The guide embeds plaintext passwords directly in an example CLI command and in code (e.g., --password=mypassword and writer.encrypt("userpassword","ownerpassword")), which instructs including secret values verbatim and is therefore insecure.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime workflow reads outsider-authored PDF content via the scripts’ input file paths (e.g., user-supplied PDFs are parsed with pypdf/PDF rendering and their text/fields/annotations are extracted), which can contain free text inside the PDF.