PDF Reader (Iyeque)

• Risk level: Low
• Analyzed: May 1, 2026, 5:40 AM
• Findings: 1
• Version: 1.1.0

Overview

This is a straightforward local PDF-reading skill; its main thing to notice is that it depends on the external PyMuPDF package.

This skill appears safe for reading PDFs locally. Be aware that extracted text and metadata may contain sensitive document information, and that the skill depends on the external PyMuPDF package.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI04: Agentic Supply Chain Vulnerabilities

Low

What this means

Installing or using the skill may require fetching PyMuPDF from the Python package ecosystem.

Why it was flagged

The skill relies on an external pip package for its core PDF processing. This is expected for the stated purpose, but the artifact does not pin a package version.

Skill content

"requires": { "bins": ["python3"], "pip": ["PyMuPDF"] }, "install": [{ "kind": "pip", "package": "PyMuPDF" }]

Recommendation

Use a trusted package source and consider pinning or reviewing the PyMuPDF version if deploying in a sensitive environment.