Skip to main content

document-generation-pdf

Automates the generation and filling of PDF documents for legal, HR, and business needs, enhancing efficiency in document workflows.

Install this skill

or
68/100

Security score

The document-generation-pdf skill was audited on Mar 7, 2026 and we found 8 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 97

Template literal with variable interpolation in command context

SourceSKILL.md
97await page.goto(`file://${pdfPath}`);
medium line 394

Template literal with variable interpolation in command context

SourceSKILL.md
394await fs.writeFile(`./documents/${caseId}.pdf`, pdfBytes);
medium line 420

Template literal with variable interpolation in command context

SourceSKILL.md
420await fs.writeFile(`./documents/${caseId}.pdf`, pdfBytes);
medium line 432

Template literal with variable interpolation in command context

SourceSKILL.md
432Key: `cases/${caseId}/petition.pdf`,
medium line 446

Template literal with variable interpolation in command context

SourceSKILL.md
446s3_url: encrypt(`s3://expungement-documents/cases/${caseId}/petition.pdf`),
medium line 514

Template literal with variable interpolation in command context

SourceSKILL.md
514page.drawText(`Defendant: ${data.name}`, { x: 100, y: 600 });
low line 408

Access to .env file

SourceSKILL.md
408ownerPassword: process.env.PDF_OWNER_PASSWORD,
low line 350

External URL reference

SourceSKILL.md
350apiClient.setBasePath('https://demo.docusign.net/restapi');
Scanned on Mar 7, 2026
View Security Dashboard