Pdf Filler

AdvisoryAudited by Static analysis on May 6, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing the dependency runs and later executes code outside the supplied artifacts, so the safety of the workflow depends partly on that package and its dependencies.

Why it was flagged

The main implementation is installed from an external, unpinned Python package rather than fully included in the reviewed skill artifacts. This is disclosed and purpose-aligned, but users must trust that package source.

Skill content
The skill scripts call the `oc-pdf-filler` Python package. Install it first: `pip install "oc-pdf-filler[all]"`
Recommendation

Install only from a trusted package source, consider pinning a known-good version, and review the package if using it on sensitive PDFs.

What this means

A generated form could contain incorrect default or inferred answers, especially for official, legal, financial, or HR documents.

Why it was flagged

The instructions permit automatic defaults for missing form values. That is useful for batch filling, but can create a completed PDF containing assumptions rather than explicit user-provided answers.

Skill content
If you are unsure for a checkbox, choose `false`, not omission. ... `--default-unset-radios first` to pick the first available option for every untouched radio group.
Recommendation

Have the user confirm uncertain fields and review the final filled PDF before relying on it; avoid broad defaulting flags unless the defaults are intended.