My Pdf

PassAudited by ClawScan on May 1, 2026.

Overview

This is a purpose-aligned, instruction-only PDF guide, but users should notice the local file/command examples and some packaging metadata inconsistencies.

This skill appears safe as an instruction-only PDF processing guide. Before using it, confirm the package identity, review any missing referenced documents if they appear later, and be careful when running examples that extract, decrypt, or write copies of private PDFs.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If run carelessly, examples could create decrypted or modified copies of sensitive PDFs on disk.

Why it was flagged

The guide includes command-line operations that can decrypt or modify local PDFs. This is expected for a PDF manipulation skill, but it is still a sensitive local file operation if used on private or protected documents.

Skill content
qpdf --password=mypassword --decrypt encrypted.pdf decrypted.pdf
Recommendation

Use the commands only on files you own or are authorized to process, and store generated outputs in a controlled location.

What this means

The package identity is somewhat unclear, which can make it harder to confirm exactly who published this skill and which version is being reviewed.

Why it was flagged

The embedded metadata differs from the registry metadata shown for this evaluation, which lists a different owner ID, slug "my-pdf", and version "1.0.0". This is a packaging/provenance inconsistency, though no executable code is present.

Skill content
"ownerId": "kn725kyxpr1g1e3rjqtkp26v0s809930", "slug": "pdf", "version": "0.1.0"
Recommendation

Verify the publisher and package metadata before relying on the skill, especially if installing it in a managed or enterprise environment.

What this means

Some advertised guidance, such as form handling or advanced examples, may be unavailable or unverifiable from the submitted artifacts.

Why it was flagged

The guide references supporting files that are not present in the provided two-file manifest. This appears to be incomplete documentation rather than hidden behavior, but it creates setup and review ambiguity.

Skill content
For advanced features, JavaScript libraries, and detailed examples, see reference.md. If you need to fill out a PDF form, read forms.md
Recommendation

Do not assume missing referenced files are safe or approved; review any additional files separately if they are later provided.