ClawHub

PDF Info

v1.0.0

Get PDF metadata, encryption status, page count, and file size. Useful for pre-flight checks before processing.

⭐ 0· 9·0 current·0 all-time
byRishabh Dugar@rishabhdugar
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
Requires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
ℹ
Purpose & Capability
The name/description match the instructions and skill.json: the skill calls an external PDF inspection API to return metadata, encryption status, page count, and file size. Minor inconsistency: registry metadata lists no primary credential/env var, but SKILL.md and skill.json require a CLIENT-API-KEY header (an API key) to call pdfapihub.com.
ℹ
Instruction Scope
Instructions are scoped to sending a PDF (via URL, base64, or multipart file) to https://pdfapihub.com/api/v1/pdf/info and returning the API response. This stays within the stated purpose, but it explicitly transmits PDF contents or locations to an external third party — a privacy/exfiltration risk for sensitive documents that users should consider.
✓
Install Mechanism
No install spec or code files are present (instruction-only), so nothing is written to disk or installed by the skill itself.
ℹ
Credentials
The skill does not request environment variables or local credentials, which is proportionate. However, it does require the caller to supply an API key in the CLIENT-API-KEY header; the absence of that requirement in the registry metadata is a small coherence gap (the API key is expected but not declared as a required credential).
✓
Persistence & Privilege
always is false and the skill is user-invocable; it does not request persistent or elevated platform privileges.
Assessment
This skill appears to do exactly what it says: call pdfapihub.com to get PDF metadata. Before installing, confirm you trust pdfapihub.com and its privacy/terms because files or file URLs (and their metadata) will be sent to that third party. Provide an API key as instructed (CLIENT-API-KEY header); note the registry metadata didn't list this credential explicitly, so make sure you know how the key will be stored/managed. If you will process sensitive PDFs, consider an on-premise or self-hosted alternative that doesn't transmit data off your network.

Like a lobster shell, security has layers — review code before you run it.

latestvk978d0zt6zxz47zb0qw4cz5ees85171k

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments