Skillv1.0.0

ClawScan security

CamScanner Remove PDF Watermark · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignApr 30, 2026, 9:45 AM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: The skill's instructions, required tools, and network usage are consistent with a simple instruction-only CamScanner PDF watermark-removal integration; it uploads a local PDF to an external CamScanner endpoint, requests processing, and downloads the result.
Guidance: This skill will upload your PDF to ai-tools.camscanner.com for processing and then save the returned file locally — do not use it with confidential or legally sensitive documents unless you trust that external service. Verify the service/domain independently (ensure it is the official CamScanner endpoint), review CamScanner's privacy/terms, and test with non-sensitive files first. Because the skill performs network I/O, avoid installing it in contexts where automatic or silent exfiltration of files would be a problem. If you need offline watermark removal, look for a local tool instead.

Purpose & Capability: okName, description, and required binaries (curl, jq) match the provided CLI-only workflow for uploading, processing, and downloading PDFs from an external CamScanner API.
Instruction Scope: noteThe SKILL.md explicitly instructs the agent to upload local files to ai-tools.camscanner.com and to write the processed PDF to a user-specified local path. This is expected for the stated purpose but does involve transmitting user files to a third-party service; there are no instructions to read other local files or environment secrets.
Install Mechanism: okNo install spec or code files are present (instruction-only). Nothing is written to disk by an installer and required binaries are standard CLI tools.
Credentials: okNo environment variables, credentials, or config paths are requested. The workflow requires no secrets, which is proportional to the described public API usage.
Persistence & Privilege: okalways:false and no install-time modifications or persistent privileges are requested. The skill is user-invocable and may be called autonomously (platform default), which is normal for instruction-only skills.