pdf2ofd
PassAudited by VirusTotal on May 11, 2026.
Overview
Type: OpenClaw Skill Name: pdf2ofd Version: 1.0.2 The skill implements a PDF to OFD (Chinese National Standard) converter by extending the 'easyofd' library through monkey-patching. The code focuses on high-fidelity rendering of text, images, and vector graphics using PyMuPDF (fitz) and Pillow. No indicators of data exfiltration, malicious execution, or prompt injection were found; all operations are local and consistent with the stated document conversion purpose in pdf2ofd.py and SKILL.md.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The converter will access the selected PDF and write an OFD file at the chosen location.
The skill directs local script execution with user-provided file paths, which is necessary for conversion but means the agent can read the chosen PDF and create an output file.
python3 pdf2ofd.py <input_path.pdf> [output_path.ofd]
Use explicit input and output paths, and avoid allowing conversion of arbitrary files or writing into sensitive directories.
Dependency behavior may vary over time, and supply-chain risk depends on the packages resolved during installation.
The dependencies are listed without version pins, so a user installing them may receive whatever versions are current from the package source.
easyofd PyMuPDF Pillow reportlab xmltodict loguru
Install from trusted package indexes and consider pinning reviewed dependency versions before use.
If imported into a larger Python workflow, the script may change how easyofd behaves for that process.
The script monkey-patches easyofd internals at runtime. This is disclosed and purpose-aligned, but it can affect easyofd behavior within the same Python process.
DPFParser.extract_text_with_details = patched_extract OFDWrite.build_document_res = patched_doc_res
Prefer running it as a separate conversion command, or review the monkey patches before importing it into shared application code.