Security audit
PDF Watermark
Security checks across malware telemetry and agentic risk
Overview
The skill appears to do what it advertises, but it sends selected PDFs/images and a PDFAPIHub API key to an external provider.
This looks like a normal PDFAPIHub watermarking integration. Before installing, make sure you are comfortable sending the documents or file URLs you choose to PDFAPIHub, and protect the API key used by the plugin.
VirusTotal
VirusTotal engine telemetry is currently stale for this artifact.
Static analysis
No suspicious patterns detected.