Nano Pdf

Edit PDFs with natural-language instructions using the nano-pdf CLI.

Security Scan

The skill is internally consistent with its stated purpose (running the nano-pdf CLI to edit PDFs); it requests no credentials and contains only a short usage instruction, though the SKILL.md includes an install hint that should be checked before installing.

Purpose & Capability

Name/description match the runtime instructions: the SKILL.md shows a single CLI usage (nano-pdf edit ...). The skill does not request unrelated credentials, files, or services. The SKILL.md metadata also declares the nano-pdf binary and an install hint, which is coherent with the goal.

Instruction Scope

Instructions are narrowly scoped: they tell the agent how to call the nano-pdf CLI to edit a page and to sanity-check outputs. There are no instructions to read arbitrary files, exfiltrate data, or access unrelated system state.

Install Mechanism

Top-level registry metadata shows no install spec (instruction-only), but the SKILL.md metadata includes an install hint using an 'uv' package entry for 'nano-pdf'. This is a minor inconsistency and 'uv' is not a universally recognized installer; verify the suggested install step and package provenance (PyPI link is provided in the SKILL.md). No archive downloads or extract instructions are present.

Credentials

The skill requests no environment variables, credentials, or config paths. This is proportionate for a CLI wrapper that only invokes a local binary.

Persistence & Privilege

The skill does not set always:true and does not declare disableModelInvocation:true, so the model could invoke it when available. Because the skill has no privileged env access or secrets, this is low risk, but users who want to prevent autonomous CLI invocation should disable model invocation for this skill.

Assessment

This skill simply documents how to run the nano-pdf CLI and does not ask for secrets, so it's generally safe from a permissions perspective. Before installing/use: (1) confirm you trust the nano-pdf binary—check the PyPI project page linked in the SKILL.md and prefer official releases; (2) verify what the 'uv' installer means in your environment before running any install command; (3) only run the tool on non-sensitive test PDFs until you confirm output correctness; (4) if you don't want the agent to call the CLI autonomously, set disableModelInvocation or otherwise require explicit user invocation.

Use nano-pdf to apply edits to a specific page in a PDF using a natural-language instruction.

Quick start

nano-pdf edit deck.pdf 1 "Change the title to 'Q3 Results' and fix the typo in the subtitle"

Notes:

• Page numbers are 0-based or 1-based depending on the tool’s version/config; if the result looks off by one, retry with the other.
• Always sanity-check the output PDF before sending it out.