ClawHub

PDF Text Replace

v2.1.4

Replace text in PDF files while preserving visual fidelity. Handles custom font encodings, embedded subsets, encrypted PDFs, image-based scans (OCR), variabl...

⭐ 0· 49·0 current·0 all-time
by@newclaw26
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
Crypto
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (replace text in PDFs preserving visual fidelity) align with required binaries and libraries (pypdf, pdfplumber, fonttools, pdf2image, Pillow, poppler) and the included scripts implement the stated features (byte-level CMap handling, variable-length replacement, OCR, decryption, style overlay). No unrelated services or credentials are requested.
✓
Instruction Scope
SKILL.md and the scripts direct local operations: parsing content streams, building font subsets, OCR, optional decryption and subprocess qpdf fallback. The code reads system font directories and PDF files (expected for this purpose). There are no instructions to transmit PDF content or system data to external endpoints.
✓
Install Mechanism
This is instruction-only with bundled source files; installation is via pip/brew commands (standard package sources and poppler). There are no downloads from untrusted URLs or archive/extract steps that would write arbitrary remote code to disk beyond the included scripts.
✓
Credentials
No environment variables or external credentials are required. The tool accepts user-supplied passwords for encrypted PDFs via CLI arguments (reasonable for L6). It does scan system font directories (read-only) which is appropriate to find fallback fonts.
✓
Persistence & Privilege
always is false and the skill does not request persistent global privileges or modify other skills. Autonomous invocation is allowed by platform default; combined with the skill's limited footprint this is not an elevated concern.
Assessment
This skill appears to do what it claims: local PDF parsing, font/subset handling, OCR and optional decryption. Before installing, verify you trust the source code (it will run locally and read PDFs and system font directories). Note optional features require additional packages (pikepdf/qpdf for decryption, paddleocr/pytesseract and opencv for OCR) and may invoke subprocesses (qpdf) — install those only if you need that capability. Provide encryption passwords only when you intend the tool to modify protected PDFs. If you need higher assurance, review the bundled scripts (already included) or run them in an isolated environment (container or VM) on non-sensitive sample PDFs first.

Like a lobster shell, security has layers — review code before you run it.

latestvk977t5h71bk0yx90j946r23zah84nwfs

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

📄 Clawdis
OSmacOS · Linux
Binspython3

Comments