Nano Pdf Cn

PassAudited by ClawScan on May 1, 2026.

Overview

This is a simple, purpose-aligned PDF editing skill, but users should notice that it installs and runs an external PyPI CLI that can modify local PDF files.

This skill appears safe and narrowly scoped for editing PDFs with nano-pdf. Before installing, verify the PyPI package is the intended nano-pdf project, use copies of important PDFs, and inspect the edited output before sharing it.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A PDF could be changed incorrectly if the page number or natural-language instruction is misunderstood.

Why it was flagged

The skill directs the agent to run a local CLI that edits a user-specified PDF. This is the core purpose of the skill, but it can alter document contents.

Skill content
nano-pdf edit deck.pdf 1 "Change the title to 'Q3 Results' and fix the typo in the subtitle"
Recommendation

Use the skill on copies of important PDFs and review the output carefully before sending or publishing it.

What this means

Installing the skill means trusting the external nano-pdf package available from the package registry at install time.

Why it was flagged

The skill depends on installing an external PyPI package to provide the CLI. This is purpose-aligned, but the reviewed artifacts do not include that package's code or a pinned package version.

Skill content
uv | package: nano-pdf | creates binaries: nano-pdf
Recommendation

Confirm the PyPI package is the intended project and consider installing a known-good version in a controlled environment.

What this means

The naming/ownership mismatch may make it harder to verify the exact packaged skill identity.

Why it was flagged

The packaged _meta.json identifies a different owner/slug than the registry metadata for the evaluated skill, which lists slug nano-pdf-cn and a different owner ID. This is a provenance consistency note, not evidence of malicious behavior.

Skill content
"ownerId": "kn70pywhg0fyz996kpa8xj89s57yhv26", "slug": "nano-pdf"
Recommendation

Check that the registry listing, package metadata, and intended nano-pdf project all refer to the skill you mean to install.