Geek-skills-mineru-pdf-parser
Warn
Audited by Snyk on Mar 26, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly ingests arbitrary PDF files (via CLI/file paths and the FastAPI POST /parse endpoint that accepts base64-encoded PDFs) and then parses/returns their text (result.to_markdown(), get_sections(), RAG data-prep examples), so untrusted user-provided third-party content could be read and materially influence downstream LLM/tool behavior.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata