pymupdf

PassAudited by ClawScan on May 1, 2026.

Overview

The skill is a straightforward PDF image utility, with minor cautions about installing an unpinned dependency and not relying on unimplemented redaction claims.

This appears safe for rendering local PDF pages and extracting embedded images. Before installing, verify the PyMuPDF package source/version if your environment is sensitive, choose output directories carefully, and do not rely on this skill for PDF redaction unless that capability is explicitly implemented and reviewed.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A future or unexpected package version could behave differently from what the reviewed code expects.

Why it was flagged

This is a user-directed external package install and is expected for the skill, but the dependency is not pinned to a specific version.

Skill content
Install dependency if missing: `pip install pymupdf`.
Recommendation

Install PyMuPDF from the official package source and consider pinning a known-good version in controlled environments.

What this means

Users could incorrectly assume the reviewed helper can perform security-sensitive redaction or annotation tasks.

Why it was flagged

The description advertises annotation and redaction use cases, but the documented workflow only lists export-images, extract-images, and info.

Skill content
Use for tasks such as ... drawing annotations, redacting content ... Run the desired command (export-images, extract-images, info).
Recommendation

Use this skill only for the implemented commands unless annotation or redaction support is separately added and reviewed.