Security audit
Security checks across malware telemetry and agentic risk
The skill appears purpose-built for resume parsing, but it automatically installs an unpinned package and creates local files containing sensitive resume data, so users should review it before installing.
Install only if you are comfortable with a first-run pip install of the latest pdfmuse package and with extracted resume contents being written to local Markdown, JSON, and CSV files. Use a controlled environment, preinstall and pin the dependency yourself if possible, and avoid processing resumes containing protected personal attributes unless you have consent and a clear retention policy.
return pdfmuse
except ImportError:
print("pdfmuse not found -- installing (one-time)...", file=sys.stderr)
subprocess.run(
[sys.executable, "-m", "pip", "install", "-q", "pdfmuse"],
check=True,
)pdfmuse
VirusTotal findings are pending for this skill version.
No suspicious patterns detected.