ebook

SUSPICIOUS. The core purpose mostly matches the capabilities, and the main API credential goes to an official Google endpoint, but the skill has medium risk from broad tool access, unpinned runtime installation, transitive dependency on an unreviewed /last30days skill, and significant indirect prompt-injection exposure from untrusted external content.

No direct backdoor/exfiltration behavior is evident in this module. The primary security concern is operational/supply-chain: it executes `pip3 install weasyprint` via `os.system` when the dependency is missing, without version pinning or integrity/trust verification, which can lead to execution of untrusted third-party code. Secondary concerns include rendering attacker-controlled HTML into PDFs using WeasyPrint with a base_url that can resolve relative assets, and writing output to an arbitrary path provided by argv (risk of unintended file overwrite depending on caller context).