Pdf Watermark Chinese

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The skill can create or overwrite PDF output files chosen during use.

Why it was flagged

The tool writes modified PDFs to an output path supplied to the function/CLI. This is expected for watermarking, but users should avoid accidentally overwriting originals.

Skill content
def add_text_watermark(self, input_pdf, output_pdf, text, ...): ... with open(output_pdf, "wb") as output_file: writer.write(output_file)
Recommendation

Use explicit output filenames, keep backups of originals, and confirm batch targets before running it on multiple documents.

What this means

The skill may run a local font-discovery utility when preparing watermarks.

Why it was flagged

The code invokes a fixed local command to discover Chinese fonts. The arguments are not user-controlled and this is purpose-aligned for Chinese watermark rendering.

Skill content
subprocess.run(['fc-list', ':lang=zh'], capture_output=True, text=True, timeout=5)
Recommendation

This is reasonable for the stated purpose; use it in a normal trusted local environment.

What this means

Users have less external provenance information for verifying the skill and its dependencies.

Why it was flagged

The artifacts do not provide an upstream project or installer manifest. This is a provenance note, not evidence of hidden behavior.

Skill content
Source: unknown; Homepage: none; Install specifications: No install spec — this is an instruction-only skill.
Recommendation

Review the included code and install any needed Python packages, such as PyPDF2 and reportlab, from trusted package sources.