Security audit
Security checks for vulnerabilities and agentic risk
The skill mostly does the PDF work it advertises, but its default PDF-to-PPT flow can automatically send document text to external or configurable translation services without clear privacy disclosure or explicit opt-in.
Install only if you are comfortable with PDF text being sent to translation providers or a configured OpenAI-compatible endpoint during PDF-to-PPT conversion. Use --no-translate/no_translate for confidential documents, review output copies before replacing originals, and use detect-only before watermark removal when document integrity matters.
f"Return ONLY the translated text, no explanation.\n\n"
f"Text: {text}"
)
resp = requests.post(
f"{api_base}/chat/completions",
headers={"Authorization": f"Bearer {api_key}"},
json={> 📖 各格式详细参数、技术细节、降级策略、已知限制见 [references/usage-guide.md](references/usage-guide.md)
> 📖 各格式详细参数、技术细节、降级策略、已知限制见 [references/usage-guide.md](references/usage-guide.md)
}
try:
result = subprocess.run(
cmd,
capture_output=True,
text=True,No suspicious patterns detected.