pdf2ofd

PassAudited by ClawScan on May 1, 2026.

Overview

This appears to be a legitimate local PDF-to-OFD converter, with routine cautions about local file access, dependency installation, and runtime monkey-patching.

This skill looks appropriate for local PDF-to-OFD conversion. Before installing or running it, install dependencies from trusted sources, consider pinning versions, run it only on PDFs you intend to convert, and choose the output path carefully.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The converter will access the selected PDF and write an OFD file at the chosen location.

Why it was flagged

The skill directs local script execution with user-provided file paths, which is necessary for conversion but means the agent can read the chosen PDF and create an output file.

Skill content
python3 pdf2ofd.py <input_path.pdf> [output_path.ofd]
Recommendation

Use explicit input and output paths, and avoid allowing conversion of arbitrary files or writing into sensitive directories.

What this means

Dependency behavior may vary over time, and supply-chain risk depends on the packages resolved during installation.

Why it was flagged

The dependencies are listed without version pins, so a user installing them may receive whatever versions are current from the package source.

Skill content
easyofd
PyMuPDF
Pillow
reportlab
xmltodict
loguru
Recommendation

Install from trusted package indexes and consider pinning reviewed dependency versions before use.

What this means

If imported into a larger Python workflow, the script may change how easyofd behaves for that process.

Why it was flagged

The script monkey-patches easyofd internals at runtime. This is disclosed and purpose-aligned, but it can affect easyofd behavior within the same Python process.

Skill content
DPFParser.extract_text_with_details = patched_extract
OFDWrite.build_document_res = patched_doc_res
Recommendation

Prefer running it as a separate conversion command, or review the monkey patches before importing it into shared application code.