Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

PDF to Images

v1.0.1

将 PDF 文件转换为图片(PNG/JPG),支持指定分辨率和页码范围

0· 86·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for fly3094/pdf-to-images.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "PDF to Images" (fly3094/pdf-to-images) from ClawHub.
Skill page: https://clawhub.ai/fly3094/pdf-to-images
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required binaries: node
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install pdf-to-images

ClawHub CLI

Package manager switcher

npx clawhub@latest install pdf-to-images
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description match the code: index.js performs local PDF-to-image conversion using pdfjs-dist and node-canvas. Requiring Node is appropriate. However, the SKILL.md metadata only declares pdfjs-dist as an npm install but the code also requires 'canvas' (node-canvas), which is not declared—an incoherence between declared dependencies and actual runtime needs.
Instruction Scope
Runtime instructions are narrowly scoped: they run a local CLI (node index.js ...) that reads a local PDF and writes image files. The SKILL.md explicitly states 'local processing' and the code performs only local file I/O. There are no network calls, hidden endpoints, or attempts to read unrelated system files or environment variables.
Install Mechanism
This is instruction-only in the registry (no automated install), and SKILL.md metadata suggests installing pdfjs-dist via npm which is reasonable. But index.js requires 'canvas' (node-canvas) at runtime; node-canvas often requires native system libraries (cairo, pango, libjpeg, etc.) and build steps. Those native prerequisites are not mentioned, so the install guidance is incomplete and may cause runtime failures or unexpected manual steps.
Credentials
The skill declares no environment variables, credentials, or config paths and the code doesn't access any secrets or external credentials. The requested access (filesystem read/write) is proportionate to the stated purpose.
Persistence & Privilege
The skill is not marked always:true and does not request persistent or system-wide privileges. It does not modify other skills or global agent configuration. Autonomous invocation is allowed (platform default) but does not combine with other concerning privileges.
What to consider before installing
This skill appears to do what it says (convert PDFs to PNG/JPG locally) and does not contact external services or request credentials. However, the package metadata/instructions are incomplete: index.js requires the 'canvas' (node-canvas) module which is not listed, and node-canvas typically needs native libraries (cairo, pango, libjpeg, etc.) or build tools. Before installing or running: 1) ensure you have Node installed; 2) install both pdfjs-dist and canvas (npm install pdfjs-dist canvas) and be prepared to install any native system dependencies for node-canvas (check node-canvas docs for platform-specific steps); 3) run the tool in a sandbox or test environment first to confirm build/run behavior and to avoid accidental file overwrites (the tool writes output files and can overwrite existing paths); 4) verify the license (MIT) and the small codebase manually if you have concerns. If you want this to be easier for end users, ask the author to update the SKILL.md/registry metadata to list 'canvas' and document native prerequisites.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🖼️ Clawdis
Binsnode
latestvk9760ghqpd39gpnxxmcww24dks84t380
86downloads
0stars
2versions
Updated 1w ago
v1.0.1
MIT-0

PDF to Images Skill

将 PDF 文件转换为图片(PNG 或 JPG 格式),支持指定分辨率和页码范围,本地处理。

使用方法

基本转换

node index.js input.pdf -o output.png

指定格式

node index.js input.pdf -o output.jpg --format jpg

指定分辨率

node index.js input.pdf -o output.png --scale 3.0

指定页码范围

node index.js input.pdf -o output/ --pages "1-3,5"

功能特点

  • ✅ 本地处理,文件不上传
  • ✅ 支持 PNG/JPG 格式
  • ✅ 可指定分辨率(0.5-5.0)
  • ✅ 支持页码范围选择
  • ✅ 多页 PDF 自动分页输出
  • ✅ 隐私安全

示例

转换单页 PDF

# 转换为 PNG
node index.js document.pdf -o page.png

# 转换为 JPG
node index.js document.pdf -o page.jpg --format jpg

转换多页 PDF

# 转换所有页面
node index.js book.pdf -o pages/

# 转换指定页面
node index.js book.pdf -o pages/ --pages "1-5"

# 高分辨率转换
node index.js book.pdf -o pages/ --scale 3.0

批量处理

# 转换当前目录所有 PDF
for f in *.pdf; do node index.js "$f" -o "${f%.pdf}.png"; done

许可证

MIT

作者

fly3094

Comments

Loading comments...