{"data":{"skill":{"slug":"zhanlincui-pdf","name":"pdf","icon":"📦","repo":"https://github.com/ZhanlinCui/Ultimate-Agent-Skills-Collection/tree/main/pdf","status":"approved","author":"ZhanlinCui","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"ce53463d-0196-4e29-ad75-1b6ff5900720","skill_id":"484a2be3-edbc-4ee7-ab57-3e75d2f5033d","version":1,"content_hash":"7f8c88176970e1d28de1549dc15d2666","risk_level":"low","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":null,"manual_install_policy":null,"summary":"Static analysis flagged 217 potential issues, but most are false positives from markdown documentation files. External command detections are code examples in backticks (markdown formatting), not actual shell execution. Filesystem operations in Python scripts are legitimate PDF/JSON processing with user-provided paths. No confirmed malicious patterns detected.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"forms.md","line_end":4,"line_start":4},{"file":"reference.md","line_end":11,"line_start":11},{"file":"SKILL.md","line_end":15,"line_start":15},{"file":"scripts/check_bounding_boxes.py","line_end":6,"line_start":6},{"file":"scripts/extract_form_field_info.py","line_end":11,"line_start":11}]},{"factor":"filesystem","evidence":[{"file":"reference.md","line_end":59,"line_start":59},{"file":"scripts/extract_form_field_info.py","line_end":143,"line_start":143},{"file":"scripts/fill_fillable_fields.py","line_end":55,"line_start":55},{"file":"scripts/fill_pdf_form_with_annotations.py","line_end":93,"line_start":93}]}],"critical_findings":[],"high_findings":[],"medium_findings":[{"title":"External Command Execution Patterns","locations":[{"file":"forms.md","line_end":4,"line_start":4},{"file":"reference.md","line_end":11,"line_start":11},{"file":"SKILL.md","line_end":15,"line_start":15}],"confidence":0.95,"description":"Static analysis detected shell command patterns in documentation files. These are markdown code examples demonstrating command-line tool usage (qpdf, pdftotext, pdfimages), not actual executable code. All commands are intended for user reference only.","confidence_reasoning":"Markdown documentation files contain backtick-quoted command examples for educational purposes, not executable shell code"}],"low_findings":[{"title":"Filesystem Write Operations","locations":[{"file":"scripts/extract_form_field_info.py","line_end":143,"line_start":143},{"file":"scripts/fill_fillable_fields.py","line_end":55,"line_start":55},{"file":"scripts/fill_pdf_form_with_annotations.py","line_end":93,"line_start":93}],"confidence":0.9,"description":"Python scripts perform file write operations for PDF output and JSON data. All file paths are provided as command-line arguments by the user, with no hardcoded paths or unauthorized file access.","confidence_reasoning":"File operations use user-provided paths from command-line arguments for legitimate PDF processing functionality"},{"title":"Hardcoded Documentation URLs","locations":[{"file":"scripts/extract_form_field_info.py","line_end":32,"line_start":32},{"file":"scripts/extract_form_field_info.py","line_end":81,"line_start":81}],"confidence":0.92,"description":"Scripts contain hardcoded URLs pointing to PDF specification documentation (Adobe, WestHealth). These are reference links for developers, not network exfiltration endpoints.","confidence_reasoning":"URLs point to public PDF specification documentation, used as reference comments in code"}],"dangerous_patterns":[],"files_scanned":11,"total_lines":1878,"audit_model":"claude","audited_at":"2026-02-24T09:39:03.549+00:00","created_at":"2026-02-24T15:49:01.592041+00:00","static_findings":[],"finding_verdicts":[],"semantic_findings":[],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"canonical install advisories are incomplete"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"low","confirmedFindingCount":1,"capabilityReviewCount":2,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":null,"manualInstallPolicy":null,"artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}