pdf-compress-tool
v1.0.2Compress PDF files to a target size or by percentage, using a Ghostscript + pikepdf + QPDF multi-stage pipeline.
⭐ 0· 111·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description, SKILL.md, and the included compress_pdf.py are consistent: the tool compresses PDFs using pikepdf, Ghostscript, and qpdf. Requiring python3 and recommending ghostscript/qpdf is proportional to the described functionality.
Instruction Scope
SKILL.md instructs the agent to run the included script and to install the listed tools; it does not ask the agent to read unrelated files, harvest environment variables, or transmit data to external endpoints beyond installing dependencies. The runtime instructions and script behavior are narrowly scoped to file compression and dependency checks.
Install Mechanism
There is no formal install spec; the script will attempt to auto-install the Python dependency pikepdf at runtime via pip (subprocess.run [sys.executable, '-m', 'pip', 'install', 'pikepdf']). Auto-installing from PyPI is expected for a Python tool but is a point of caution because it fetches and executes third‑party code.
Credentials
The skill requests no environment variables, no credentials, and no config paths. Its runtime actions (checking PATH for gs/qpdf, running subprocesses) are consistent with its purpose and do not access unrelated secrets.
Persistence & Privilege
The skill is not always-enabled and does not request permanent or system-wide privileges. It does not modify other skills or system-wide agent settings. Autonomous invocation is allowed by default but is not combined with other concerning flags.
Assessment
This skill appears to do what it says: compress PDFs using pikepdf/Ghostscript/qpdf. Before installing or running it: (1) review the included compress_pdf.py (you already have it) to verify behavior — the script is local and readable; (2) be aware the script will try to run pip install pikepdf at runtime, which fetches a package from PyPI — if you prefer, preinstall pikepdf in a controlled virtualenv or system environment instead of letting the script auto-install; (3) run the tool on non-sensitive/test PDFs first to confirm results; (4) ensure Ghostscript and qpdf are installed from trusted package sources when needed; and (5) if you require stronger isolation, execute the script in a sandbox/container or VM so runtime dependency installation cannot affect your host environment.Like a lobster shell, security has layers — review code before you run it.
latestvk97bhc8akp7z0sm1r1ebgqyw9h83ggea
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📄 Clawdis
OSmacOS · Linux · Windows
Binspython3