pdf

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill includes examples that embed plaintext passwords directly into command-line arguments and function calls (e.g., --password=mypassword and writer.encrypt("userpassword","ownerpassword")), which would require the agent to handle or reproduce secret values verbatim.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow is driven by user-provided PDF files and uses scripts like check_fillable_fields.py (PdfReader(sys.argv[1]).get_fields()) and extract_form_field_info.py/extract_form_structure.py (PdfReader(pdf_path), pdfplumber.open(pdf_path) then extract_words()), which ingest free text embedded in the uploaded PDF for analysis at runtime.