Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
PDF Batch Processing Tool
v1.0.0Batch process PDF files - merge multiple PDFs, split PDF into multiple files, rotate pages, extract text, extract images, compress PDFs. Use when you need to...
⭐ 0· 49·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
high confidencePurpose & Capability
SKILL.md advertises merge, split, rotate, extract text, extract images, and compress PDF. The package includes scripts for merge, split, rotate, and extract_text, but there are no scripts for 'extract images' or 'compress PDFs' despite requirements.txt including Pillow (which would support image work). This mismatch between claimed capabilities and provided artifacts is a notable inconsistency.
Instruction Scope
Runtime instructions tell the agent to run local Python scripts on user-provided file paths; the scripts operate on files/directories provided as arguments and do not access network endpoints, environment variables, or unrelated system paths. No evidence of data exfiltration in the instructions or code.
Install Mechanism
There is no install spec beyond a plain pip suggestion (pip install pypdf pillow) in SKILL.md and a simple requirements.txt listing pypdf and Pillow — both are well-known packages. No downloads from arbitrary URLs or archive extraction.
Credentials
The skill requests no environment variables, no credentials, and references no config paths. The level of access requested is appropriate for a local file-processing utility.
Persistence & Privilege
The skill does not request 'always: true' or other elevated persistence. It is user-invocable and allowed to be invoked autonomously by the agent (the platform default), which is normal; the skill does not modify other skills or system-wide settings.
What to consider before installing
This skill appears to be a local PDF utility and the included scripts are benign and file-local, but the SKILL.md overclaims features: it advertises image extraction and PDF compression that are not implemented in the included files. Before installing or using it: 1) don't assume missing features exist — ask the publisher or inspect for scripts like extract_images.py and compress_pdf.py; 2) if you need image extraction/compression, either implement or obtain verified code, or run this in a sandbox and test on non-sensitive PDFs; 3) pip dependencies (pypdf, Pillow) are standard — review versions you install; 4) if you want to avoid any autonomous invocation, disable the skill or only invoke it manually. If the mismatch (advertised vs provided) is unexpected, treat this as a sign the package may be incomplete or poorly maintained rather than malicious, but verify before using on important data.Like a lobster shell, security has layers — review code before you run it.
Mergevk970edpfw7874a3d2rfadzt6y183jh48extract text from PDFs in batch. Local processingvk970edpfw7874a3d2rfadzt6y183jh48latestvk970edpfw7874a3d2rfadzt6y183jh48private.vk970edpfw7874a3d2rfadzt6y183jh48rotatevk970edpfw7874a3d2rfadzt6y183jh48splitvk970edpfw7874a3d2rfadzt6y183jh48
License
MIT-0
Free to use, modify, and redistribute. No attribution required.