Geek-skills-mineru-pdf-parser

Warn

Audited by Snyk on May 13, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). The skill's SKILL.md and references/mineru_v3_reference.md explicitly show the parse_documents tool accepts URLs in file_sources (i.e., fetching arbitrary remote PDFs), which the agent converts into LLM-readable Markdown and therefore could ingest untrusted third-party content that might carry indirect prompt-injection instructions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
May 13, 2026, 03:16 AM
Issues
1
Security Audit — snyk — Geek-skills-mineru-pdf-parser