Lock PDF

v1.0.0

Add password protection and encryption to a PDF. Supports AES-256, AES-128, RC4-128 encryption and granular permissions.

⭐ 0· 76·1 current·1 all-time

byRishabh Dugar@rishabhdugar

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for rishabhdugar/lock-pdf.

Previewing Install & Setup.

Prompt PreviewInstall & Setup

Install the skill "Lock PDF" (rishabhdugar/lock-pdf) from ClawHub.
Skill page: https://clawhub.ai/rishabhdugar/lock-pdf
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install lock-pdf

ClawHub CLI

Package manager switcher

npx clawhub@latest install lock-pdf

Security Scan

Capability signals

Requires sensitive credentials

These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.

VirusTotal

Benign

View report →

OpenClaw

Benign

medium confidence

✓

Purpose & Capability

The skill's name/description (locking/encrypting PDFs) matches the instructions and skill.json which call an external API (pdfapihub.com) and require an API key header. Requiring an API key and accepting url/base64/file inputs is appropriate for this purpose. Minor metadata mismatch: registry-level 'Required env vars' lists none while skill.json declares apiKey auth required; this is explainable (the API key is provided at request time via header rather than as a platform env var) but should be noted.

ℹ

Instruction Scope

SKILL.md instructs the agent to POST PDF data (url/base64/multipart file) and an API key to pdfapihub.com. There is no instruction to read unrelated local files, secrets, or system config. Important operational note: using the skill will transmit entire PDF contents (possibly sensitive) to a third-party endpoint — the SKILL.md lists HIPAA/GDPR use cases but provides no proof of compliance or retention policy.

✓

Install Mechanism

Instruction-only skill with no install spec and no code files — nothing is written to disk by the skill itself. This is the lowest-risk installation model.

ℹ

Credentials

The skill requires an API key sent in the CLIENT-API-KEY header (documented in SKILL.md and skill.json). The platform metadata shows no declared primary credential or required env vars; this is not harmful but is a minor inconsistency in how credentials are represented (runtime header vs platform-stored env var). No other credentials or unrelated secrets are requested.

✓

Persistence & Privilege

always is false and the skill does not request persistent or elevated platform privileges. Autonomous invocation is allowed (default) but not combined with other privilege-escalating flags.

Assessment

This skill forwards your PDF content and an API key to pdfapihub.com to perform encryption. Before using it, verify the service and its privacy/retention policies (especially if your PDFs contain PHI or other regulated data), confirm TLS and that the CDN/endpoint domains are legitimate, and avoid sending highly sensitive documents until you've validated compliance. Consider local encryption tools if you need to keep documents on-premises. Also ensure you handle and store the CLIENT-API-KEY securely (don't paste it into chatlogs) and test the service with non-sensitive sample documents first. Finally, note the minor metadata inconsistency: the skill expects an API key header at runtime even though the registry metadata shows no platform-stored credential.

Like a lobster shell, security has layers — review code before you run it.

latestvk97ack3hqxarw8h49pstktsw4s851jch

76downloads

0stars

1versions

Updated 1w ago

v1.0.0

MIT-0

Lock PDF

What It Does

Encrypts a PDF with password protection. Supports AES-256 (default), AES-128, and RC4-128 encryption. Allows setting separate user and owner passwords with granular permission controls.

When to Use

Protect a PDF with a password before sharing
Set permissions (allow print but deny copy/modify)
Re-encrypt an already encrypted PDF with a new password

Required Inputs

password — user password (required to open the PDF)
Plus one of: url, base64_pdf, or multipart file upload

Authentication

Send your API key in the CLIENT-API-KEY header.

Get your free API key at https://pdfapihub.com. Full API documentation is available at https://pdfapihub.com/docs.

Use Cases

Confidential Document Protection — Encrypt contracts, NDAs, or financial reports before sharing
Read-Only Distribution — Allow viewing and printing but prevent copying or editing
Client Deliverables — Password-protect reports or proposals sent to clients
Compliance — Encrypt sensitive PDFs (HIPAA, GDPR) before storage or transmission
Exam Papers — Lock exam PDFs with a password released only at exam time
IP Protection — Restrict copying from proprietary documents while allowing viewing

Permissions

Permission	Description
`print`	Allow printing
`print_highres`	Allow high-res printing
`copy`	Allow copying text
`modify`	Allow modifying content
`annotate`	Allow adding annotations
`fill_forms`	Allow filling form fields
`extract`	Allow extracting content
`assemble`	Allow assembling pages

Example Usage

curl -X POST https://pdfapihub.com/api/v1/lockPdf \
  -H "CLIENT-API-KEY: your_api_key" \
  -H "Content-Type: application/json" \
  -d '{
    "url": "https://pdfapihub.com/sample.pdf",
    "password": "viewerPass",
    "owner_password": "adminPass",
    "permissions": { "print": true, "copy": false, "modify": false },
    "output": "url"
  }'

Comments

Loading comments...