PDF to markdown converter

• Analyzed: May 11, 2026, 6:55 AM
• Findings: 1
• Version: 0.1.0
• Hash: 4131b02750058fc7c4c6d742dc61ecd4e8d55adeee6377adf9eeaa790f984da5
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle facilitates PDF conversion but includes high-risk installation instructions in rules/install.md, specifically the use of `npx -y pdf2markdown-cli init -y` for automated remote code execution and a `setup skills` command designed to modify the configurations of multiple other AI agents (e.g., Cursor, Windsurf, Claude). While the provided security guidelines in rules/security.md suggest some defensive practices like gitignoring output, the CLI's capability for cross-application modification and the automated installation of remote packages are high-risk behaviors that warrant caution.