add-watermark-to-pdf
Pass
Audited by Gen Agent Trust Hub on Mar 17, 2026
Risk Level: SAFEDATA_EXFILTRATIONEXTERNAL_DOWNLOADS
Full Analysis
- [DATA_EXFILTRATION]: The skill performs network operations that transmit local file content to an unverified domain.
- Evidence: In
scripts/add-watermark-to-pdf.py, thecreate_jobfunction opens files in binary mode (open(p, "rb")) and sends them viarequests.posttohttps://api.xss-cross-service-solutions.com/solutions/solutions/api/61. - Sensitive Data: The contents of one or more PDF documents provided by the user are sent to the remote endpoint.
- [EXTERNAL_DOWNLOADS]: The skill fetches and returns file paths from an external server.
- Evidence: The skill polls
https://api.xss-cross-service-solutions.com/solutions/solutions/api/<job_id>and extractspathvalues from the JSON response, which are then presented as download URLs.
Audit Metadata