Security audit
Security checks for vulnerabilities and agentic risk
The skill is not clearly malicious, but it advertises PDF extraction while also enabling broad PDF conversion and editing through an external ComPDF upload service.
Review this skill before installing if you only wanted extraction. Use it only for documents you are allowed to send to ComPDF Cloud, confirm uploads deliberately, avoid highly sensitive files unless approved, and be careful with editing actions such as delete, split, merge, watermark removal, or compression because the package exposes more than extraction.
The skill metadata advertises extraction/OCR/parsing, but the body instructs the agent to perform a much broader set of PDF conversion and editing actions. This scope mismatch can cause the skill to be invoked in contexts users did not intend, increasing the chance of unintended document transformation or exfiltration to a third-party API under a misleading description.
Triggering the skill whenever the user mentions 'ComPDF' or related keywords is overly broad and can activate external-upload behavior without a clear task match. In a file-processing skill, over-triggering is risky because it increases the chance of unnecessary collection, prompting for API keys, or steering documents into third-party processing paths.
The tool-selection section includes many non-extraction endpoints such as conversion, merge, split, and watermark operations despite the skill being presented as an extraction tool. That mismatch broadens effective privilege and may lead an agent to choose destructive or unnecessary actions on user files beyond the declared purpose.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
| Code | Description | Troubleshooting |
|---|---|---|
| 06001 | File processing quota exhausted | Purchase quota or wait for quota reset; visit https://api.compdf.com/api/pricing-old/?utm_source=clawhub&utm_medium=skillhub&utm_campaign=pdf_skill_pdf_extract&ref_platform_id=clawhub_skills for more credits |
### 07xxx - Feature Errors
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
| Code | Description | Troubleshooting |
|---|---|---|
| 06001 | File processing quota exhausted | Purchase quota or wait for quota reset; visit https://api.compdf.com/api/pricing-old/?utm_source=clawhub&utm_medium=skillhub&utm_campaign=pdf_skill_pdf_extract&ref_platform_id=clawhub_skills for more credits |
### 07xxx - Feature Errors
The documented parameters expose broad document-modification capabilities such as merge, split, delete, rotate, insert, watermarking, comparison, and compression even though the skill is described as extraction-focused. This capability drift increases the chance an agent or user will invoke unintended write/destructive operations on uploaded PDFs, violating least privilege and expanding the attack surface beyond the stated purpose.
The documentation includes a page-deletion operation without any warning that it irreversibly removes content or that users should work on a copy. In an agent setting, ambiguous documentation around destructive actions can lead to accidental data loss if the model selects the wrong endpoint or infers deletion as an acceptable way to satisfy a request.
The manifest frames output formats as exports of extracted content from PDFs and images, not as general-purpose document conversion. This file advertises other-to-PDF and image-to-multiple-format conversion features, which suggests a broader converter skill than the declared extract-and-export intent.
The manifest describes a skill focused on extracting structured data, OCR text, tables, images, and stamps from PDFs and images, with export to various output formats. This reference file documents additional capabilities such as merging, splitting, deleting, rotating pages, adding/removing watermarks, comparing PDFs, converting to PDF/A, and generating PDFs, which materially exceed an extraction-only scope.
Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.
"Contribution" shall mean any work of authorship, including
the original Work and any and all modifications thereof or Derivative
Works thereof, and any and all modifications thereof. If the Work is
a software module, then a Contribution includes, but is not limited
to, any source code, object code, patch, and documentation related
to the Work; and, for purposes of this definition, Contribution means
any work of authorship submitted to, or already incorporated in, the
The file describes sending PDFs and images through OCR, extraction, conversion, comparison, and related document-processing features without any privacy or data-handling warning. In an extraction skill, users are likely to upload invoices, IDs, contracts, or other sensitive documents, so omission of an external-transmission notice can lead to inadvertent disclosure of confidential data to a third-party API.
No suspicious patterns detected.