pdf2ofd

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The converter will access the selected PDF and write an OFD file at the chosen location.

Why it was flagged

The skill directs local script execution with user-provided file paths, which is necessary for conversion but means the agent can read the chosen PDF and create an output file.

Skill content
python3 pdf2ofd.py <input_path.pdf> [output_path.ofd]
Recommendation

Use explicit input and output paths, and avoid allowing conversion of arbitrary files or writing into sensitive directories.

What this means

Dependency behavior may vary over time, and supply-chain risk depends on the packages resolved during installation.

Why it was flagged

The dependencies are listed without version pins, so a user installing them may receive whatever versions are current from the package source.

Skill content
easyofd
PyMuPDF
Pillow
reportlab
xmltodict
loguru
Recommendation

Install from trusted package indexes and consider pinning reviewed dependency versions before use.

What this means

If imported into a larger Python workflow, the script may change how easyofd behaves for that process.

Why it was flagged

The script monkey-patches easyofd internals at runtime. This is disclosed and purpose-aligned, but it can affect easyofd behavior within the same Python process.

Skill content
DPFParser.extract_text_with_details = patched_extract
OFDWrite.build_document_res = patched_doc_res
Recommendation

Prefer running it as a separate conversion command, or review the monkey patches before importing it into shared application code.