pdf-processing

PassAudited by ClawScan on May 1, 2026.

Overview

This appears to be a straightforward PDF-processing instruction skill, with the main caution that it asks users to install Python packages and add scripts that are not included in the artifact.

This skill is reasonable for local PDF tasks, but before using it, install `pdfplumber` and `pypdf` from trusted sources, review any added scripts, and keep backup copies before filling forms or merging documents.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

Installing unpinned packages or adding external scripts could introduce unreviewed code into the local environment.

Why it was flagged

The skill relies on user-installed Python packages and separately supplied scripts, but no versions, lockfile, install spec, or script contents are included. This is consistent with the PDF-processing purpose, but users should review what they install and run.

Skill content

需要安装 pdfplumber：
```bash
pip install pdfplumber pypdf
```
...
将相关处理脚本放到 `scripts/` 目录。

Recommendation

Install packages from trusted sources, consider pinning versions, and review any scripts placed in `scripts/` before using them.