Pdf Form Filler
PassAudited by ClawScan on May 1, 2026.
Overview
The skill’s code matches its stated PDF form-filling purpose and shows no hidden network, credential, persistence, or destructive behavior.
This appears safe for its stated purpose. Before using it on important or sensitive forms, install dependencies from trusted sources, consider pinning the pdfrw version, work on copies of PDFs, and review the filled output before submitting it.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If you install the package yourself, your environment may pull a newer pdfrw release than the author tested.
The skill depends on a third-party package with only a minimum version constraint. This dependency is expected for PDF processing, but future dependency resolution could install versions not represented by these artifacts.
pdfrw>=0.4
Install from trusted package sources and consider pinning pdfrw to a reviewed version in production or sensitive workflows.
A user following the documentation may look for the wrong script path or import path.
The provided manifest contains `pdf_form_filler/fill_pdf_form.py`, not `scripts/fill_pdf_form.py`. This appears to be a documentation/package-layout mismatch, not hidden behavior, because the included implementation is visible and purpose-aligned.
See `scripts/fill_pdf_form.py` for the full implementation using pdfrw.
Use the included `pdf_form_filler.fill_pdf_form` module path, or update the documentation to match the packaged files.