pypdf

PassAudited by ClawScan on May 1, 2026.

Overview

This PDF utility appears purpose-aligned; it reads and writes local PDF files and may require installing pypdf, so users should check file paths and the dependency source.

This skill looks safe for ordinary PDF tasks. Before installing or using it, verify that pypdf is installed from a trusted source and make sure any output paths are intentional, especially because write operations can create directories and overwrite files.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing an unpinned package may pull the latest available version rather than a reviewed version.

Why it was flagged

The dependency installation is expected for a pypdf-based PDF utility, but it is unpinned and not represented by a formal install spec.

Skill content
Install dependency if missing: `pip install pypdf`.
Recommendation

Install pypdf from a trusted package index and consider pinning a known-good version in controlled environments.

What this means

A mistaken output path could create directories or overwrite an existing file.

Why it was flagged

The script writes PDF outputs to user-supplied paths and creates parent directories, which is normal for PDF manipulation but should be used with intentional paths.

Skill content
output.parent.mkdir(parents=True, exist_ok=True)
with open(output, "wb") as f:
    writer.write(f)
Recommendation

Review input and output paths before running write operations such as split, merge, extract-pages, or rotate.