Security audit
Security checks for vulnerabilities and agentic risk
This is a simple PDF utility description with expected local file handling and no hidden execution, persistence, or data-sharing behavior.
Before installing, confirm you are comfortable with a local PDF helper that may read document contents and write output files. Avoid using sensitive PDFs unless you trust the runtime environment, and choose non-conflicting output filenames.
Most operational instructions, parameter descriptions, and tables are written in Chinese, while the skill does not state that language selection is optional or region-specific. This can constitute a language/locale policy issue because the skill effectively defaults to a specific language without explicit user opt-in.
The feature list advertises extracting text from PDFs, including contracts in the examples and use cases, but does not warn that extracted text may contain sensitive or confidential information. Because the markdown describes behavior that can expose user data in plain text, a privacy-oriented warning should be present.
This markdown file describes operations like merge, split, and watermark that create or modify output PDF files, but it does not warn users that running the skill will write files to disk and may overwrite existing paths if reused. For a file-manipulating skill, a brief user-facing warning about output file effects is expected under the markdown-specific warning criterion.
No suspicious patterns detected.
