pdf

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The guide includes literal passwords placed directly in command-line arguments and in code (e.g., qpdf --password=mypassword and writer.encrypt("userpassword", "ownerpassword")), which requires embedding secret values verbatim and exposes them in outputs — a high exfiltration risk.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Outsider-authored free text from an uploaded PDF is extracted as labels via scripts/extract_form_structure.py at runtime (page.extract_words()), and that extracted word text is then written into form_structure.json/downstream JSON without any selection step.