Pdf Cn

v1.0.1

PDF 文档处理 | PDF Document Processing. 读取、提取、合并、分割 PDF | Read, extract, merge, split PDFs. 支持文本提取、表格识别、注释 | Supports text extraction, table recognition, annotat...

0· 1.7k·27 current·28 all-time
byGuohongbin@guohongbin-git
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
high confidence
!
Purpose & Capability
The code and SKILL.md implement PDF reading, form extraction, image conversion, OCR, and form-filling — consistent with the description. However, the skill metadata declares no dependencies or required binaries while the instructions and scripts clearly rely on external command-line tools (pdftotext/pdftoppm/pdfimages/qpdf/pdftk/ImageMagick 'magick') and Python packages (pypdf, pdfplumber, pdf2image, pytesseract, reportlab, PIL). The metadata also contains mixed provenance/license signals (LICENSE.txt claims Anthropic ownership and restrictive terms while _meta.json lists MIT and a different author/homepage). These mismatches are a coherence concern.
Instruction Scope
SKILL.md and FORMS.md instruct the agent/user to run local Python scripts and CLI tools that read input PDFs, write output PDFs/images, and create JSON manifests. The instructions do not attempt to read unrelated system files or call external network endpoints. They do, however, instruct use of external tools (ImageMagick, pdftotext, qpdf, pdftk) and recommend installing Python packages; these tool dependencies are not declared in the registry metadata.
Install Mechanism
There is no install spec (lowest installation risk). The skill includes multiple Python scripts in the bundle (so code will be present on disk if installed). This is reasonable for a code-backed skill, but the package does not provide an install/requirements file or declare how to install its Python dependencies or required system binaries — increasing friction and risk of mismatched runtime environments.
Credentials
The skill declares no environment variables or credentials and the scripts do not reference secrets or external credentials. No unexpected credential access was found.
Persistence & Privilege
always is false and there is no install-time modification of other skills or system-wide agent configuration. The skill runs as-invoked and does not request persistent elevated privileges.
What to consider before installing
This skill implements PDF processing and form-filling code, but there are important inconsistencies you should address before trusting it with real data: - Dependency mismatch: The registry lists no required binaries or packages, but SKILL.md/scripts require system tools (pdftotext/pdftoppm/pdfimages/qpdf/pdftk, ImageMagick 'magick') and Python libraries (pypdf, pdfplumber, pdf2image, pytesseract, PIL, reportlab, etc.). Ensure you install these in a controlled environment (virtualenv or container) before running, and verify versions. - Licensing/provenance mismatch: LICENSE.txt claims restrictive Anthropic terms while _meta.json lists MIT and a different author/homepage. Confirm the license and source before redistributing or using in production. - Code audit: The included scripts perform local file I/O and modify PDFs (they do not perform network I/O or handle secrets), but you should still review the code and run it on non-sensitive example files first to validate behavior (especially the form-filling and coordinate transforms). - Run in isolation: Execute the scripts in a sandboxed environment (VM/container) and avoid processing sensitive documents until you are confident in the tool's outputs. If you need automatic agent-driven invocation, consider restricting it until dependencies and provenance are clarified. If these issues are resolved (declare and install dependencies, clarify license/source), the skill otherwise appears coherent with its stated purpose.

Like a lobster shell, security has layers — review code before you run it.

chinesevk9755psq8g3wpx38hw0wxdaj5s81adgddocumentvk9755psq8g3wpx38hw0wxdaj5s81adgdlatestvk972sp0ewm6qb28da2bvc3gkw581hzgkpdfvk9755psq8g3wpx38hw0wxdaj5s81adgd

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

📕 Clawdis

Comments