Security audit
Security checks across malware telemetry and agentic risk
This PDF compression skill is not clearly malicious, but it asks to upload local PDFs and an API key to an unspecified external service while also requesting broad agent capabilities.
Before installing, verify the real compression service endpoint, privacy policy, file retention behavior, and API key handling. Avoid using it with sensitive PDFs unless you are comfortable sending them to that external service, and require explicit confirmation before any upload.
import requests
# ...
def compress_pdf(file_path, api_key, quality=75, dpi=144):
url = "https://api.example.com/solutions/solutions/api/29"
headers = {"Authorization": f"Bearer {api_key}"}
files = {"file": open(file_path, "rb")}
data = {"imageQuality": quality, "dpi": dpi}64/64 vendors flagged this skill as clean.
No suspicious patterns detected.