PDF Read/Write Toolkit

• Risk level: Low
• Analyzed: Apr 15, 2026, 12:45 PM
• Findings: 0
• Version: 1.0.0

Overview

The skill's code, instructions, and declared dependencies align with a PDF read/write toolkit and do not request unrelated credentials or suspicious system access.

This skill appears to do what it says: run its Python scripts to read, split/merge, or generate PDFs. Before installing, ensure the host can install the declared Python packages (weasyprint often needs system libraries like Cairo). Treat PDFs as potentially sensitive—only point the skill at files you want processed, and run in a sandbox or restricted workspace if those PDFs contain secrets. Keep pdf-related libraries up to date because PDF parsers have historically had security vulnerabilities when processing hostile documents. Finally, note the small inconsistency that the registry had no install spec while SKILL.md lists pip deps — make sure those dependencies are available in your environment.