OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass5 providerslatest audit Sep 14, 2026
Independent checks from skills.sh's audit partners.
The skill is a PDF-to-Markdown conversion tool using standard Node.js libraries. It is safe for its intended purpose, but carries a low risk of indirect prompt injection because it processes untrusted documents without isolation markers or sanitization. It also includes extensive instructions that attempt to override standard agent behavior protocols.
Detected behaviors
No alerts
No issues
1/10 files flagged
Score: 93/100 · 2 sections analyzed