As described [here](https://medium.com/@marvinjanssen/stealing-app-private-keys-on-blockstack-2cec9d606390) it is possible to attack users by sharing malicious documents.