pdf

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill contains examples that embed plaintext passwords directly in commands and code (e.g., qpdf --password=mypassword and writer.encrypt("userpassword","ownerpassword")), which instructs the agent to include secret values verbatim and is therefore insecure.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow reads outsider-authored free text if an outsider can submit a crafted PDF whose internal form fields/annotations are parsed at runtime by scripts/check_fillable_fields.py (via PdfReader.get_fields()), scripts/extract_form_field_info.py (via reader.get_fields() and page.get('/Annots')), and scripts/fill_pdf_form_with_annotations.py (via fields.json-driven text annotations from user-provided PDF form field content).