Habilidades pdf Histórico de auditoria

📦

Histórico de auditoria

pdf - 10 auditorias

Comparação de versões

Alterações de capacidades e constatações entre versões auditadas, mais recentes primeiro.

Versão	Data	Resultado	Itens de revisão	Mudança vs anterior
v10 Mais recente	23 de jul. de 2026, 07:41	Sem constatações confirmadas	0	Sem mudança de capacidade
v9	7 de jul. de 2026, 19:17	1 confirmado	25	Sem mudança de capacidade
v8	5 de jul. de 2026, 01:38	Sem constatações confirmadas	3	Sem mudança de capacidade
v7	5 de jul. de 2026, 01:38	Sem constatações confirmadas	3	Contém scripts
v6	28 de jun. de 2026, 09:55	2 confirmado	1	Comandos externosAcesso à rede
v5	16 de jan. de 2026, 16:42	Sem constatações confirmadas	1	Sem mudança de capacidade
v4	16 de jan. de 2026, 16:42	Sem constatações confirmadas	1	Sem mudança de capacidade
v3	10 de jan. de 2026, 10:32	Sem constatações confirmadas	1	Sem mudança de capacidade
v2	10 de jan. de 2026, 10:32	Sem constatações confirmadas	1	Sem mudança de capacidade
v1	10 de jan. de 2026, 10:32	Sem constatações confirmadas	1	Base

Versão da auditoria 10 Mais recente

23 de jul. de 2026, 07:41

All 104 static alerts are false positives after contextual review. Backtick detections are Markdown, JavaScript template literals, comments, or Python messages; hardcoded URLs are documentation links. Local reads and writes are explicit PDF workflow operations, with no command injection, reconnaissance, prompt injection, exfiltration, or hidden network request.

Arquivos analisados

1,909

Linhas analisadas

Itens de revisão

Falsos positivos ignorados

Fatores de risco

⚙️ Comandos externos (50)

forms.md:60-73 reference.md:64-78 reference.md:186-206 reference.md:227-242 reference.md:257-258 reference.md:258-259 reference.md:259-263 scripts/check_bounding_boxes.py:6 scripts/check_bounding_boxes.py:41 scripts/check_bounding_boxes.py:43 scripts/check_bounding_boxes.py:53 scripts/check_bounding_boxes.py:66 scripts/convert_pdf_to_images.py:14 scripts/create_validation_image.py:12 scripts/extract_form_field_info.py:11 scripts/extract_form_field_info.py:38 scripts/fill_fillable_fields.py:34 scripts/fill_fillable_fields.py:37 scripts/fill_fillable_fields.py:84 scripts/fill_fillable_fields.py:86 scripts/fill_fillable_fields.py:87 scripts/fill_fillable_fields.py:88 scripts/fill_fillable_fields.py:89 scripts/fill_pdf_form_with_annotations.py:8 scripts/fill_pdf_form_with_annotations.py:31 SKILL.md:15-26 SKILL.md:26-33 SKILL.md:33-44 SKILL.md:44-47 SKILL.md:47-54 SKILL.md:54-57 SKILL.md:57-64 SKILL.md:64-67 SKILL.md:67-77 SKILL.md:77-82 SKILL.md:82-89 SKILL.md:89-92 SKILL.md:92-100 SKILL.md:100-103 SKILL.md:103-119 SKILL.md:119-124 SKILL.md:124-140 SKILL.md:140-143 SKILL.md:143-167 SKILL.md:167-172 SKILL.md:172-181 SKILL.md:181-184 SKILL.md:184-197 SKILL.md:197-200 SKILL.md:200-209

📁 Acesso ao sistema de arquivos (25)

🌐 Acesso à rede (3)

scripts/extract_form_field_info.py:32 scripts/extract_form_field_info.py:81 scripts/fill_pdf_form_with_annotations.py:78

Auditado por: codex

Versão da auditoria 9

7 de jul. de 2026, 19:17

Most external-command detections were false positives caused by Markdown fences, inline code, comments, and JavaScript template literals. Real risk remains from local filesystem reads and writes, caller-provided output paths, and documented command-line PDF workflows; no prompt injection or data-exfiltration intent was found.

Arquivos analisados

1,909

Linhas analisadas

Itens de revisão

Falsos positivos ignorados

Preocupações de segurança confirmadas (1)

Médio

forms.md:3-8 SKILL.md:169-209 reference.md:265-341

Command-Line PDF Tool Execution Requires Confirmation

The skill documentation directs agents to run local helper scripts and PDF utilities with user-provided file paths. This is useful functionality, but it should require user confirmation and path review before execution.

The cited files explicitly instruct use of Python helper scripts and shell PDF tools. The intent is legitimate PDF processing, but command execution with caller-controlled paths is a real operational risk.

Itens de revisão de capacidade (25)

Estas são capacidades locais reais que podem ser esperadas para esta habilidade, portanto exigem revisão, mas não são contabilizadas como comportamento malicioso confirmado.

Médio

reference.md:59

Node.js fs operations

const existingPdfBytes = fs.readFileSync('input.pdf');

The reference example reads local PDF files from disk. This is expected for PDF work, but local reads should be limited to user-approved paths.

Médio

reference.md:76

Node.js fs operations

fs.writeFileSync('modified.pdf', pdfBytes);

The example writes PDF or text output to the local filesystem. This is expected for the skill, but it can overwrite files if an agent uses unsafe output paths.

Médio

reference.md:137

Node.js fs operations

fs.writeFileSync('created.pdf', pdfBytes);

The example writes PDF or text output to the local filesystem. This is expected for the skill, but it can overwrite files if an agent uses unsafe output paths.

Médio

reference.md:151

Node.js fs operations

const pdf1Bytes = fs.readFileSync('doc1.pdf');

The reference example reads local PDF files from disk. This is expected for PDF work, but local reads should be limited to user-approved paths.

Médio

reference.md:152

Node.js fs operations

const pdf2Bytes = fs.readFileSync('doc2.pdf');

The reference example reads local PDF files from disk. This is expected for PDF work, but local reads should be limited to user-approved paths.

Médio

reference.md:166

Node.js fs operations

fs.writeFileSync('merged.pdf', mergedPdfBytes);

The example writes PDF or text output to the local filesystem. This is expected for the skill, but it can overwrite files if an agent uses unsafe output paths.

Médio

reference.md:59

Synchronous file operations

const existingPdfBytes = fs.readFileSync('input.pdf');

The reference example reads local PDF files from disk. This is expected for PDF work, but local reads should be limited to user-approved paths.

Médio

reference.md:76

Synchronous file operations

fs.writeFileSync('modified.pdf', pdfBytes);

The example writes PDF or text output to the local filesystem. This is expected for the skill, but it can overwrite files if an agent uses unsafe output paths.

Médio

reference.md:137

Synchronous file operations

fs.writeFileSync('created.pdf', pdfBytes);

The example writes PDF or text output to the local filesystem. This is expected for the skill, but it can overwrite files if an agent uses unsafe output paths.

Médio

reference.md:151

Synchronous file operations

const pdf1Bytes = fs.readFileSync('doc1.pdf');

The reference example reads local PDF files from disk. This is expected for PDF work, but local reads should be limited to user-approved paths.

Médio

reference.md:152

Synchronous file operations

const pdf2Bytes = fs.readFileSync('doc2.pdf');

The reference example reads local PDF files from disk. This is expected for PDF work, but local reads should be limited to user-approved paths.

Médio

reference.md:166

Synchronous file operations

fs.writeFileSync('merged.pdf', mergedPdfBytes);

The example writes PDF or text output to the local filesystem. This is expected for the skill, but it can overwrite files if an agent uses unsafe output paths.

Médio

reference.md:488

Python file write/append

with open("batch_merged.pdf", "wb") as output:

The example writes PDF or text output to the local filesystem. This is expected for the skill, but it can overwrite files if an agent uses unsafe output paths.

Médio

reference.md:500

Python file write/append

with open(output_file, 'w', encoding='utf-8') as f:

The example writes PDF or text output to the local filesystem. This is expected for the skill, but it can overwrite files if an agent uses unsafe output paths.

Médio

reference.md:524

Python file write/append

with open("cropped.pdf", "wb") as output:

The example writes PDF or text output to the local filesystem. This is expected for the skill, but it can overwrite files if an agent uses unsafe output paths.

Médio

reference.md:563

Python file write/append

with open(f"chunk_{start_idx//chunk_size}.pdf", "wb") as output:

The example writes PDF or text output to the local filesystem. This is expected for the skill, but it can overwrite files if an agent uses unsafe output paths.

Médio

scripts/extract_form_field_info.py:143

Python file write/append

with open(json_output_path, "w") as f:

The helper script writes to an output path supplied by the caller. This is legitimate PDF processing, but it can overwrite user-accessible files if paths are not constrained.

Médio

scripts/fill_fillable_fields.py:55

Python file write/append

with open(output_pdf_path, "wb") as f:

The helper script writes to an output path supplied by the caller. This is legitimate PDF processing, but it can overwrite user-accessible files if paths are not constrained.

Médio

scripts/fill_pdf_form_with_annotations.py:93

Python file write/append

with open(output_pdf_path, "wb") as output:

The helper script writes to an output path supplied by the caller. This is legitimate PDF processing, but it can overwrite user-accessible files if paths are not constrained.

Médio

SKILL.md:42

Python file write/append

with open("merged.pdf", "wb") as output:

The example writes PDF or text output to the local filesystem. This is expected for the skill, but it can overwrite files if an agent uses unsafe output paths.

Médio

SKILL.md:52

Python file write/append

with open(f"page_{i+1}.pdf", "wb") as output:

The example writes PDF or text output to the local filesystem. This is expected for the skill, but it can overwrite files if an agent uses unsafe output paths.

Médio

SKILL.md:75

Python file write/append

with open("rotated.pdf", "wb") as output:

The example writes PDF or text output to the local filesystem. This is expected for the skill, but it can overwrite files if an agent uses unsafe output paths.

Médio

SKILL.md:247

Python file write/append

with open("watermarked.pdf", "wb") as output:

The example writes PDF or text output to the local filesystem. This is expected for the skill, but it can overwrite files if an agent uses unsafe output paths.

Médio

SKILL.md:272

Python file write/append

with open("encrypted.pdf", "wb") as output:

The example writes PDF or text output to the local filesystem. This is expected for the skill, but it can overwrite files if an agent uses unsafe output paths.

Baixo

reference.md:474

Python glob/pattern matching

pdf_files = glob.glob(os.path.join(input_dir, "*.pdf"))

The example enumerates PDF files from a caller-provided directory. This can expose filenames or process unintended documents if used without path review.

Fatores de risco

⚙️ Comandos externos (62)

📁 Acesso ao sistema de arquivos (25)

🌐 Acesso à rede (3)

scripts/extract_form_field_info.py:32 scripts/extract_form_field_info.py:81 scripts/fill_pdf_form_with_annotations.py:78

Auditado por: codex

Versão da auditoria 8

5 de jul. de 2026, 01:38

Manual review found that most static hits are false positives from Markdown fences, comments, examples, and documentation links. The confirmed issues are medium-risk filesystem writes in helper scripts that accept caller-supplied output paths without workspace or overwrite guards. No evidence found of prompt injection, data exfiltration, malware behavior, or runtime network activity.

Arquivos analisados

1,909

Linhas analisadas

Itens de revisão

Falsos positivos ignorados

Itens de revisão de capacidade (3)

Estas são capacidades locais reais que podem ser esperadas para esta habilidade, portanto exigem revisão, mas não são contabilizadas como comportamento malicioso confirmado.

Médio

scripts/extract_form_field_info.py:143

Python file write/append

with open(json_output_path, "w") as f:

The script writes JSON to a caller-supplied output path with no path restriction or overwrite guard. This is expected functionality, but it can overwrite files if invoked with an unsafe path.

Médio

scripts/fill_fillable_fields.py:55

Python file write/append

with open(output_pdf_path, "wb") as f:

The helper writes the generated PDF to a caller-supplied output path without checking workspace boundaries. The write is legitimate for form filling, but unsafe paths could overwrite local files.

Médio

scripts/fill_pdf_form_with_annotations.py:93

Python file write/append

with open(output_pdf_path, "wb") as output:

The annotation workflow writes a generated PDF to a caller-supplied path with no overwrite protection. This is a real filesystem risk when paths are not constrained to a work directory.

Fatores de risco

⚙️ Comandos externos (62)

📁 Acesso ao sistema de arquivos (25)

🌐 Acesso à rede (3)

scripts/extract_form_field_info.py:32 scripts/extract_form_field_info.py:81 scripts/fill_pdf_form_with_annotations.py:78

Auditado por: codex

Versão da auditoria 7

5 de jul. de 2026, 01:38

Arquivos analisados

1,909

Linhas analisadas

Itens de revisão

Falsos positivos ignorados

Itens de revisão de capacidade (3)

Estas são capacidades locais reais que podem ser esperadas para esta habilidade, portanto exigem revisão, mas não são contabilizadas como comportamento malicioso confirmado.

Médio

scripts/extract_form_field_info.py:143

Python file write/append

with open(json_output_path, "w") as f:

The script writes JSON to a caller-supplied output path with no path restriction or overwrite guard. This is expected functionality, but it can overwrite files if invoked with an unsafe path.

Médio

scripts/fill_fillable_fields.py:55

Python file write/append

with open(output_pdf_path, "wb") as f:

The helper writes the generated PDF to a caller-supplied output path without checking workspace boundaries. The write is legitimate for form filling, but unsafe paths could overwrite local files.

Médio

scripts/fill_pdf_form_with_annotations.py:93

Python file write/append

with open(output_pdf_path, "wb") as output:

The annotation workflow writes a generated PDF to a caller-supplied path with no overwrite protection. This is a real filesystem risk when paths are not constrained to a work directory.

Fatores de risco

⚙️ Comandos externos (62)

📁 Acesso ao sistema de arquivos (25)

🌐 Acesso à rede (3)

scripts/extract_form_field_info.py:32 scripts/extract_form_field_info.py:81 scripts/fill_pdf_form_with_annotations.py:78

Auditado por: codex

Versão da auditoria 6

28 de jun. de 2026, 09:55

Static analysis reported many high-risk patterns, but manual review found most severe hits are false positives from PDF examples, comments, and documentation URLs. The confirmed risk is medium because the skill intentionally guides agents to run local helper scripts and PDF command-line tools that read and write user-selected files. No evidence found of prompt injection, data exfiltration, malware control behavior, or malicious network activity.

Arquivos analisados

1,909

Linhas analisadas

Itens de revisão

Falsos positivos ignorados

Preocupações de segurança confirmadas (2)

Médio

scripts/convert_pdf_to_images.py:10-23 scripts/extract_form_field_info.py:140-144 scripts/fill_fillable_fields.py:12-56 scripts/fill_pdf_form_with_annotations.py:28-94 scripts/create_validation_image.py:11-29

Local PDF Scripts Read and Write User-Selected Paths

TRUE_POSITIVE. The helper scripts intentionally read PDFs, JSON, and images from command-line paths and write derived PDFs, JSON, and PNG files. This is expected for PDF automation, but it can overwrite files or process malicious PDFs if used without workspace controls.

The scripts clearly accept caller-provided file paths and perform local reads and writes. The behavior is legitimate for the skill, but it is still a real filesystem risk.

Médio

forms.md:3-4 forms.md:53-75 SKILL.md:169-197 reference.md:265-340

PDF Workflows Instruct Agents to Run Local Commands

TRUE_POSITIVE. The skill documentation tells the agent to run local Python helpers and command-line PDF tools. The commands are not obfuscated or malicious, but they increase risk because they operate on local files and depend on installed binaries.

The command examples and required helper-script invocations are explicit. No shell interpolation or covert command execution was found in the reviewed executable scripts.

Itens de revisão de capacidade (1)

Estas são capacidades locais reais que podem ser esperadas para esta habilidade, portanto exigem revisão, mas não são contabilizadas como comportamento malicioso confirmado.

Baixo

forms.md:1-4 forms.md:78-89 forms.md:191-200

Strong Procedural Language Is Task Guidance, Not Prompt Injection

NEEDS_REVIEW. forms.md uses strong words such as CRITICAL and MUST to enforce form-filling order and visual validation. It does not ask the reviewer or model to skip security analysis, override instructions, or change risk levels.

The language is directive and should be treated as untrusted skill content. Its context is operational accuracy rather than instruction override.

Falsos positivos estáticos ignorados (2)

Estas correspondências estáticas foram descartadas pela revisão semântica ou corresponderam a tokens apenas de esquema, portanto são exibidas para transparência, mas não afetam a pontuação de qualidade.

Baixo

LICENSE.txt:8-9 scripts/extract_form_field_info.py:31-32 scripts/extract_form_field_info.py:79-81 scripts/fill_pdf_form_with_annotations.py:77-78

Hardcoded URLs Are Documentation References

FALSE_POSITIVE. The hardcoded URLs point to license terms, PDF standards, blog references, and issue trackers. No runtime network request or document upload path was found.

The URLs are inside comments or license text, and the scripts do not import HTTP clients. This strongly supports a false-positive network verdict.

Baixo

SKILL.md:259-273 reference.md:331-340 forms.md:56-75 scripts/check_bounding_boxes_test.py:174-185

Weak Crypto and C2 Static Hits Are Contextual False Positives

FALSE_POSITIVE. The flagged cryptography and C2 indicators come from PDF password, encryption, checkbox, and command examples. No evidence found of malware control channels, credential theft, or weak cryptography implemented by the helper scripts.

Manual review tied the hits to normal PDF examples and unit-test data. The evidence does not show malicious intent or hidden communication behavior.

Fatores de risco

⚡ Contém scripts (5)

scripts/check_fillable_fields.py:1-12 scripts/convert_pdf_to_images.py:1-35 scripts/extract_form_field_info.py:1-152 scripts/fill_fillable_fields.py:1-114 scripts/fill_pdf_form_with_annotations.py:1-108

⚙️ Comandos externos (4)

forms.md:3-4 forms.md:53-75 SKILL.md:169-197 reference.md:265-340

📁 Acesso ao sistema de arquivos (5)

SKILL.md:42-43 reference.md:59-76 scripts/convert_pdf_to_images.py:22-23 scripts/fill_fillable_fields.py:55-56 scripts/fill_pdf_form_with_annotations.py:92-94

🌐 Acesso à rede (4)

LICENSE.txt:8-9 scripts/extract_form_field_info.py:31-32 scripts/extract_form_field_info.py:79-81 scripts/fill_pdf_form_with_annotations.py:77-78

Padrões detectados

Local PDF Scripts Read and Write User-Selected PathsPDF Workflows Instruct Agents to Run Local Commands

Auditado por: codex

Versão da auditoria 5

16 de jan. de 2026, 16:42

This is a legitimate PDF manipulation skill containing 8 Python scripts for document processing. The 227 static findings are false positives: documentation examples showing command syntax are not actual shell execution; legitimate file I/O uses standard PDF libraries (pypdf, pdfplumber); cryptographic references are for PDF password protection; and flagged keywords like 'command' appear only in documentation context. No network calls, no command injection, no credential handling.

Arquivos analisados

2,233

Linhas analisadas

Itens de revisão

Falsos positivos ignorados

Itens de revisão de capacidade (1)

Estas são capacidades locais reais que podem ser esperadas para esta habilidade, portanto exigem revisão, mas não são contabilizadas como comportamento malicioso confirmado.

Baixo

scripts/fill_fillable_fields.py:12

User-specified file paths accessed

Scripts accept file paths as command-line arguments for PDF processing. Expected behavior for document tools.

Fatores de risco

⚡ Contém scripts (3)

scripts/fill_fillable_fields.py:1-115 scripts/check_bounding_boxes.py:1-71 scripts/extract_form_field_info.py:1-153

📁 Acesso ao sistema de arquivos (2)

scripts/fill_fillable_fields.py:12-56 scripts/extract_form_field_info.py:140-145

Auditado por: claude

Versão da auditoria 4

16 de jan. de 2026, 16:42

Arquivos analisados

2,233

Linhas analisadas

Itens de revisão

Falsos positivos ignorados

Itens de revisão de capacidade (1)

Estas são capacidades locais reais que podem ser esperadas para esta habilidade, portanto exigem revisão, mas não são contabilizadas como comportamento malicioso confirmado.

Baixo

scripts/fill_fillable_fields.py:12

User-specified file paths accessed

Scripts accept file paths as command-line arguments for PDF processing. Expected behavior for document tools.

Fatores de risco

⚡ Contém scripts (3)

scripts/fill_fillable_fields.py:1-115 scripts/check_bounding_boxes.py:1-71 scripts/extract_form_field_info.py:1-153

📁 Acesso ao sistema de arquivos (2)

scripts/fill_fillable_fields.py:12-56 scripts/extract_form_field_info.py:140-145

Auditado por: claude

Versão da auditoria 3

10 de jan. de 2026, 10:32

This is a legitimate PDF manipulation skill containing 8 Python scripts for processing PDF files. All scripts use standard Python libraries (pypdf, pdfplumber, reportlab) and perform expected PDF operations. No network calls, no command execution, no environment variable access. File I/O is limited to user-specified paths for PDF and JSON files.

Arquivos analisados

1,829

Linhas analisadas

Itens de revisão

Falsos positivos ignorados

Itens de revisão de capacidade (1)

Estas são capacidades locais reais que podem ser esperadas para esta habilidade, portanto exigem revisão, mas não são contabilizadas como comportamento malicioso confirmado.

Baixo

scripts/fill_fillable_fields.py:12 scripts/fill_pdf_form_with_annotations.py:28

User-specified file paths accessed

Scripts accept file paths as command-line arguments and perform read/write operations. While this is expected behavior for PDF tools, a malicious user could potentially point the script at sensitive files. For example, fill_fillable_fields.py reads input_pdf_path, fields_json_path, and writes to output_pdf_path (lines 12-56). This follows expected patterns for document processing tools.

Fatores de risco

⚡ Contém scripts (8)

scripts/fill_fillable_fields.py:1-115 scripts/fill_pdf_form_with_annotations.py:1-108 scripts/check_fillable_fields.py:1-13 scripts/check_bounding_boxes.py:1-71 scripts/extract_form_field_info.py:1-153 scripts/create_validation_image.py:1-42 scripts/convert_pdf_to_images.py:1-36 scripts/check_bounding_boxes_test.py:1-227

📁 Acesso ao sistema de arquivos (3)

scripts/fill_fillable_fields.py:12-56 scripts/fill_pdf_form_with_annotations.py:28-97 scripts/extract_form_field_info.py:140-145

Auditado por: claude

Versão da auditoria 2

10 de jan. de 2026, 10:32

Arquivos analisados

1,829

Linhas analisadas

Itens de revisão

Falsos positivos ignorados

Itens de revisão de capacidade (1)

Estas são capacidades locais reais que podem ser esperadas para esta habilidade, portanto exigem revisão, mas não são contabilizadas como comportamento malicioso confirmado.

Baixo

scripts/fill_fillable_fields.py:12 scripts/fill_pdf_form_with_annotations.py:28

User-specified file paths accessed

Fatores de risco

⚡ Contém scripts (8)

📁 Acesso ao sistema de arquivos (3)

scripts/fill_fillable_fields.py:12-56 scripts/fill_pdf_form_with_annotations.py:28-97 scripts/extract_form_field_info.py:140-145

Auditado por: claude

Versão da auditoria 1

10 de jan. de 2026, 10:32

Arquivos analisados

1,829

Linhas analisadas

Itens de revisão

Falsos positivos ignorados

Itens de revisão de capacidade (1)

Estas são capacidades locais reais que podem ser esperadas para esta habilidade, portanto exigem revisão, mas não são contabilizadas como comportamento malicioso confirmado.

Baixo

scripts/fill_fillable_fields.py:12 scripts/fill_pdf_form_with_annotations.py:28

User-specified file paths accessed

Fatores de risco

⚡ Contém scripts (8)

📁 Acesso ao sistema de arquivos (3)

scripts/fill_fillable_fields.py:12-56 scripts/fill_pdf_form_with_annotations.py:28-97 scripts/extract_form_field_info.py:140-145

Auditado por: claude

← Voltar para a habilidade