pdf-extract-hardened

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill explicitly instructs the agent to return extracted PDF text directly in the conversation (unless an output file is named), meaning any secrets present in the PDF would be reproduced verbatim in the LLM output and thus creates an exfiltration risk.