Security audit
Security checks across malware telemetry and agentic risk
This PDF skill appears purpose-built, but normal use can automatically install packages/browser components and fetch remote or local assets without strong containment.
Use only in an isolated virtual environment or container. Preinstall reviewed dependencies yourself where possible, avoid running the auto-fix path on a system Python, and do not use remote cover images or confidential local file paths unless network and local-file rendering are acceptable.
def ensure_deps():
if importlib.util.find_spec("pypdf") is None:
import subprocess
subprocess.check_call(
[sys.executable, "-m", "pip", "install", "--break-system-packages", "-q", "pypdf"]
)def ensure_deps():
if importlib.util.find_spec("pypdf") is None:
import subprocess
subprocess.check_call(
[sys.executable, "-m", "pip", "install", "--break-system-packages", "-q", "pypdf"]
)def ensure_deps():
if importlib.util.find_spec("pypdf") is None:
import subprocess
subprocess.check_call(
[sys.executable, "-m", "pip", "install", "--break-system-packages", "-q", "pypdf"]
)missing.append("pypdf")
if missing:
import subprocess
subprocess.check_call(
[sys.executable, "-m", "pip", "install", "--break-system-packages", "-q"] + missing
)if importlib.util.find_spec(p) is None]
if missing:
import subprocess
subprocess.check_call(
[sys.executable, "-m", "pip", "install",
"--break-system-packages", "-q"] + missing
)64/64 vendors flagged this skill as clean.
Detected: suspicious.dangerous_exec