Pdf Cn

PassAudited by ClawScan on May 1, 2026.

Overview

This is a coherent local PDF-processing skill; its main risks are ordinary local file changes and user-managed dependency installs.

Install this if you need local PDF processing. Treat PDFs and generated images/JSON/text as potentially sensitive, keep backups of originals, review output paths, and install any optional dependencies from trusted sources.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI02: Tool Misuse and Exploitation

What this means

The skill can create or overwrite local PDF-related output files if directed to those paths.

Why it was flagged

This shows the skill expects running bundled scripts that read a PDF and write a filled output PDF. That file mutation is central to the PDF form-filling purpose and uses user-specified paths.

Skill content

`python scripts/fill_fillable_fields.py <input pdf> <field_values.json> <output pdf>`

Recommendation

Use copies of important PDFs, choose output paths explicitly, and review generated PDFs before relying on them.

Info

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

If users install optional packages, they are trusting whatever package versions their environment retrieves.

Why it was flagged

The OCR example relies on external Python packages without version pinning. This is optional and purpose-aligned, but dependency provenance is left to the user.

Skill content

# Requires: pip install pytesseract pdf2image

Recommendation

Install PDF/OCR dependencies from trusted package sources and consider pinning versions in controlled environments.