ClawHub

Nested PDF Merger

v1.0.0

Use this skill when the task is to merge PDFs from a nested directory tree into a single PDF with hierarchical bookmarks by invoking the external `nestedpdfm...

⭐ 0· 180·0 current·0 all-time
byBriant@lyutenant
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name, description, and required binary (nestedpdfmerger) align: merging PDFs from a nested directory tree legitimately requires an external CLI that performs the merge. No unrelated binaries, env vars, or config paths are requested.
✓
Instruction Scope
SKILL.md only instructs the agent to confirm input/output paths and run the nestedpdfmerger CLI (or tell the user how to install it). It does not instruct reading unrelated system files, exfiltrating data, or contacting external endpoints. It will operate on user-specified filesystem paths (expected for this task).
ℹ
Install Mechanism
No formal install spec in the registry (instruction-only). The README suggests installing via `pip install nestedpdfmerger`, which is a reasonable, common installation method but is moderately risky if the PyPI package or source is unvetted. No automatic downloads or obscure URLs are present in the skill itself.
✓
Credentials
The skill requests no environment variables, credentials, or config paths — appropriate for a local CLI wrapper.
✓
Persistence & Privilege
The skill does not request always-on presence or system-wide configuration changes. It is user-invocable and allows autonomous invocation by default (normal for skills) but does not elevate privileges itself.
Assessment
This skill is internally consistent: it only documents how to call an external CLI (nestedpdfmerger). Before installing or allowing the agent to run it, verify the nestedpdfmerger package/source: check the linked GitHub homepage, confirm the maintainer and recent activity, and prefer installing into a virtualenv (or inspect the package contents) rather than system-wide. Use the skill's recommended --dry-run to preview actions. Be mindful that the agent will execute a CLI against filesystem paths you provide — avoid passing untrusted or network-mounted directories you don't want processed, and ensure inputs are sanitized if you are concerned about shell injection in the environment where the agent runs.

Like a lobster shell, security has layers — review code before you run it.

latestvk9736645wtbmmhs74ve265229582wbrg

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

Binsnestedpdfmerger

Comments