PDF Lock & Unlock

• Risk level: Low
• Analyzed: Apr 18, 2026, 3:24 AM
• Findings: 0
• Version: 1.0.1
• Hash: 1b7baa42d16704cac6437061e7fed58a9bccc51e858a8db948be452c0633a1e8

Overview

The plugin is internally consistent with its stated purpose — it calls PDFAPIHub endpoints to lock/unlock PDFs — but there is a small metadata inconsistency about required credentials and a privacy risk because PDFs are uploaded to a third‑party service.

This plugin appears to do what it says, but it uploads PDFs to PDFAPIHub for processing. Before installing: 1) Confirm you trust PDFAPIHub (review their privacy/retention policy and terms); do not upload highly sensitive documents unless you're comfortable with third‑party processing. 2) Provide the API key (PDFAPIHUB_API_KEY) only if you accept that the plugin will use your account; store the key securely and rotate it if exposed. 3) Be aware the registry summary omitted required env metadata — ensure you set the API key in ~/.openclaw/openclaw.json or env. 4) If you need offline processing for sensitive files, consider a local tool instead of a cloud API. 5) Verify the plugin source (repository/homepage) and contact info if you need guarantees about deletion/retention beyond the stated 30 days.