PDF Editor
ReviewAudited by ClawScan on May 10, 2026.
Overview
The PDF-editing purpose is clear, but review before installing because the skill downloads and runs an external executable at first use and sends your email for license activation.
This appears to be a purpose-aligned PDF editor, but its reviewed package does not contain the actual CLI; it downloads and runs one from ComPDF at first use. Install it only if you trust that vendor and are comfortable sharing your email for licensing and processing your selected PDFs with the downloaded local tool.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing or invoking the skill may cause your agent to trust and run a binary that was not present for static review.
The executable that implements the skill is outside the reviewed artifact set. The provided instructions do not show checksum, signature, or pinned-version verification before use.
The CLI binary is not included in the Skill package. It is downloaded from the official ComPDFKit distribution server (`download.compdf.com`)
Only use this skill if you trust the vendor and download source. Prefer a package that includes verifiable binaries or provides signed downloads and published checksums.
A downloaded local executable will run on your machine and may have access to the PDFs and paths you provide to it.
The skill instructs the agent to execute the downloaded CLI during setup verification. This is central to the skill's purpose, but it is still high-impact because the binary is downloaded at runtime and not reviewed in the package.
After extraction, run: `chmod +x {skill_root}/scripts/mac/compdf_cli` ... Verify: run `<CLI> --help`Confirm the download and execution before first use, and avoid running it on sensitive PDFs unless you trust the external CLI.
Your email address will be shared with the vendor to obtain a trial license.
License activation collects an email address and sends it to ComPDF's license server. This is disclosed and requires user confirmation, so it is a note rather than a concern.
Ask the user for their email address ... After the user confirms, send `POST https://wms.compdf.com/api/license/skillsTrial`
Use an email address you are comfortable sharing with ComPDF and review their privacy policy if needed.