📦

pdf

Name: pdf
Author: anthropics

Content revision r1 Safe ⚙️ External commands📁 Filesystem access🌐 Network access

Process PDF Documents

PDF work often requires careful extraction, conversion, and form handling. This skill gives Claude, Codex, and Claude Code practical workflows for processing PDFs with local tools.

Supports: Claude Codex Code(CC)

🥉 78 Bronze

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "pdf" from https://skillstore.io/skills/pdf.md and its manifest at https://skillstore.io/api/skills/pdf/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/pdf.md Signed manifest GET /api/skills/pdf/manifest Signed lockfile GET /api/skills/pdf/lockfile

Test it

Using "pdf". Extract text and tables from a quarterly report PDF.

Expected outcome:

A text file with page-separated content, plus a spreadsheet containing detected tables and a short note about pages with no tables.

Using "pdf". Fill a non-fillable PDF application using provided applicant data.

Expected outcome:

A completed PDF with text annotations placed in validated bounding boxes, plus validation images showing each target area.

Using "pdf". Merge three signed documents and add password protection.

Expected outcome:

One combined PDF in the requested order, encrypted with the supplied password and ready for review.

Security Audit

Safe

v9 • 7/9/2026 Open versioned report

The confirmed findings are expected local filesystem reads, writes, and directory matching used for PDF processing workflows. Backtick, network, and system reconnaissance alerts are false positives from Markdown, comments, template strings, or field names; no prompt injection, subprocess execution, or real network access was found.

Files scanned

1,909

Lines analyzed

Review items

False positives ignored

Capability review items (25)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium

reference.md:59

Node.js fs operations

const existingPdfBytes = fs.readFileSync('input.pdf');

The documented workflow reads or writes local PDF-related files. This is expected for PDF processing, but filesystem access is real.

Medium

reference.md:76

Node.js fs operations

fs.writeFileSync('modified.pdf', pdfBytes);

The documented workflow reads or writes local PDF-related files. This is expected for PDF processing, but filesystem access is real.

Medium

reference.md:137

Node.js fs operations

fs.writeFileSync('created.pdf', pdfBytes);

The documented workflow reads or writes local PDF-related files. This is expected for PDF processing, but filesystem access is real.

Medium

reference.md:151

Node.js fs operations

const pdf1Bytes = fs.readFileSync('doc1.pdf');

The documented workflow reads or writes local PDF-related files. This is expected for PDF processing, but filesystem access is real.

Medium

reference.md:152

Node.js fs operations

const pdf2Bytes = fs.readFileSync('doc2.pdf');

The documented workflow reads or writes local PDF-related files. This is expected for PDF processing, but filesystem access is real.

Medium

reference.md:166

Node.js fs operations

fs.writeFileSync('merged.pdf', mergedPdfBytes);

The documented workflow reads or writes local PDF-related files. This is expected for PDF processing, but filesystem access is real.

Medium

reference.md:59

Synchronous file operations

const existingPdfBytes = fs.readFileSync('input.pdf');

The documented workflow reads or writes local PDF-related files. This is expected for PDF processing, but filesystem access is real.

Medium

reference.md:76

Synchronous file operations

fs.writeFileSync('modified.pdf', pdfBytes);

The documented workflow reads or writes local PDF-related files. This is expected for PDF processing, but filesystem access is real.

Medium

reference.md:137

Synchronous file operations

fs.writeFileSync('created.pdf', pdfBytes);

The documented workflow reads or writes local PDF-related files. This is expected for PDF processing, but filesystem access is real.

Medium

reference.md:151

Synchronous file operations

const pdf1Bytes = fs.readFileSync('doc1.pdf');

The documented workflow reads or writes local PDF-related files. This is expected for PDF processing, but filesystem access is real.

Medium

reference.md:152

Synchronous file operations

const pdf2Bytes = fs.readFileSync('doc2.pdf');

The documented workflow reads or writes local PDF-related files. This is expected for PDF processing, but filesystem access is real.

Medium

reference.md:166

Synchronous file operations

fs.writeFileSync('merged.pdf', mergedPdfBytes);

The documented workflow reads or writes local PDF-related files. This is expected for PDF processing, but filesystem access is real.

Medium

reference.md:488

Python file write/append

with open("batch_merged.pdf", "wb") as output:

The documented workflow reads or writes local PDF-related files. This is expected for PDF processing, but filesystem access is real.

Medium

reference.md:500

Python file write/append

with open(output_file, 'w', encoding='utf-8') as f:

The documented workflow reads or writes local PDF-related files. This is expected for PDF processing, but filesystem access is real.

Medium

reference.md:524

Python file write/append

with open("cropped.pdf", "wb") as output:

The documented workflow reads or writes local PDF-related files. This is expected for PDF processing, but filesystem access is real.

Medium

reference.md:563

Python file write/append

with open(f"chunk_{start_idx//chunk_size}.pdf", "wb") as output:

The documented workflow reads or writes local PDF-related files. This is expected for PDF processing, but filesystem access is real.

Medium

scripts/extract_form_field_info.py:143

Python file write/append

with open(json_output_path, "w") as f:

The helper script writes a user-specified output file as part of PDF processing. This is expected behavior, but local filesystem write access is real.

Medium

scripts/fill_fillable_fields.py:55

Python file write/append

with open(output_pdf_path, "wb") as f:

The helper script writes a user-specified output file as part of PDF processing. This is expected behavior, but local filesystem write access is real.

Medium

scripts/fill_pdf_form_with_annotations.py:93

Python file write/append

with open(output_pdf_path, "wb") as output:

The helper script writes a user-specified output file as part of PDF processing. This is expected behavior, but local filesystem write access is real.

Medium

SKILL.md:42

Python file write/append

with open("merged.pdf", "wb") as output:

The documented workflow reads or writes local PDF-related files. This is expected for PDF processing, but filesystem access is real.

Medium

SKILL.md:52

Python file write/append

with open(f"page_{i+1}.pdf", "wb") as output:

The documented workflow reads or writes local PDF-related files. This is expected for PDF processing, but filesystem access is real.

Medium

SKILL.md:75

Python file write/append

with open("rotated.pdf", "wb") as output:

The documented workflow reads or writes local PDF-related files. This is expected for PDF processing, but filesystem access is real.

Medium

SKILL.md:247

Python file write/append

with open("watermarked.pdf", "wb") as output:

The documented workflow reads or writes local PDF-related files. This is expected for PDF processing, but filesystem access is real.

Medium

SKILL.md:272

Python file write/append

with open("encrypted.pdf", "wb") as output:

The documented workflow reads or writes local PDF-related files. This is expected for PDF processing, but filesystem access is real.

Low

reference.md:474

Python glob/pattern matching

pdf_files = glob.glob(os.path.join(input_dir, "*.pdf"))

The example enumerates local PDF files from a user-supplied directory. This is expected batch PDF behavior, but directory scanning is real.

Risk Factors

⚙️ External commands (50)

forms.md:60-73 reference.md:64-78 reference.md:186-206 reference.md:227-242 reference.md:257-258 reference.md:258-259 reference.md:259-263 scripts/check_bounding_boxes.py:6 scripts/check_bounding_boxes.py:41 scripts/check_bounding_boxes.py:43 scripts/check_bounding_boxes.py:53 scripts/check_bounding_boxes.py:66 scripts/convert_pdf_to_images.py:14 scripts/create_validation_image.py:12 scripts/extract_form_field_info.py:11 scripts/extract_form_field_info.py:38 scripts/fill_fillable_fields.py:34 scripts/fill_fillable_fields.py:37 scripts/fill_fillable_fields.py:84 scripts/fill_fillable_fields.py:86 scripts/fill_fillable_fields.py:87 scripts/fill_fillable_fields.py:88 scripts/fill_fillable_fields.py:89 scripts/fill_pdf_form_with_annotations.py:8 scripts/fill_pdf_form_with_annotations.py:31 SKILL.md:15-26 SKILL.md:26-33 SKILL.md:33-44 SKILL.md:44-47 SKILL.md:47-54 SKILL.md:54-57 SKILL.md:57-64 SKILL.md:64-67 SKILL.md:67-77 SKILL.md:77-82 SKILL.md:82-89 SKILL.md:89-92 SKILL.md:92-100 SKILL.md:100-103 SKILL.md:103-119 SKILL.md:119-124 SKILL.md:124-140 SKILL.md:140-143 SKILL.md:143-167 SKILL.md:167-172 SKILL.md:172-181 SKILL.md:181-184 SKILL.md:184-197 SKILL.md:197-200 SKILL.md:200-209

📁 Filesystem access (25)

🌐 Network access (3)

scripts/extract_form_field_info.py:32 scripts/extract_form_field_info.py:81 scripts/fill_pdf_form_with_annotations.py:78

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/pdf/audits/9?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/pdf/security.svg)](https://skillstore.io/skills/pdf?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/pdf?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/pdf/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/pdf.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

anthropics. (2026). pdf security audit report (audit version 9) [Author version unspecified]. Skillstore. https://skillstore.io/skills/pdf/audits/9

BibTeX citation

@techreport{anthropics-pdf-2026,
  author = {anthropics},
  title = {pdf security audit report (audit version 9)},
  institution = {Skillstore},
  year = {2026},
  number = {9},
  url = {https://skillstore.io/skills/pdf/audits/9},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "pdf security audit report (audit version 9)"
version: "unspecified"
type: report
authors:
  - name: "anthropics"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/pdf/audits/9"
identifiers:
  - type: other
    value: "skillstore:pdf:audit:9"
    description: "Skillstore immutable audit report identifier"

Compare variants

13 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Highest Skillstore Score

Author / source Skillstore Score Evidence Confidence Skillstore usage Updated

ZhanlinCui Recommended

zhanlincui-pdf

Skillstore Score 80

Evidence Confidence High

Skillstore usage 186

Updated

2026-08-21

davila7

davila7-pdf

Skillstore Score 79

Evidence Confidence High

Skillstore usage 23

Updated

2026-08-21

DYAI2025

dyai2025-pdf

Skillstore Score 79

Evidence Confidence High

Skillstore usage 18

Updated

2026-08-21

Azeem-2

azeem-2-pdf

Skillstore Score 79

Evidence Confidence High

Skillstore usage 16

Updated

2026-08-21

ArtemisAI

artemisai-pdf

Skillstore Score 79

Evidence Confidence High

Skillstore usage 13

Updated

2026-08-21

ComposioHQ

composiohq-pdf

Skillstore Score 79

Evidence Confidence High

Skillstore usage 12

Updated

2026-08-21

davila7

davila7-pdf-processing

Skillstore Score 79

Evidence Confidence High

Skillstore usage 9

Updated

2026-08-21

anthropics Current

pdf

Skillstore Score 78

Evidence Confidence High

Skillstore usage 148

Updated

2026-08-21

92Bilal26

92bilal26-pdf

Skillstore Score 78

Evidence Confidence High

Skillstore usage 23

Updated

2026-08-21

Cam10001110101

cam10001110101-pdf

Skillstore Score 78

Evidence Confidence High

Skillstore usage 10

Updated

2026-08-21

sickn33

sickn33-pdf

Skillstore Score 78

Evidence Confidence High

Skillstore usage 9

Updated

2026-08-21

K-Dense-AI

k-dense-ai-pdf

Skillstore Score 76

Evidence Confidence High

Skillstore usage 8

Updated

2026-08-21

AutumnsGrove

autumnsgrove-pdf

Skillstore Score 75

Evidence Confidence High

Skillstore usage 38

Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Prepare Filled Forms

Detect form fields, map user data to valid fields, validate results, and create a completed PDF.

Extract Structured Data

Pull text, tables, annotations, and coordinates from reports for review or downstream analysis.

Automate Document Assembly

Merge, split, rotate, watermark, encrypt, or create PDFs as part of repeatable workflows.

Try These Prompts

Extract PDF Text

Use the pdf skill to extract readable text from document.pdf. Tell me which tool you used and save the result as document.txt.

Merge Selected Documents

Use the pdf skill to merge cover.pdf, report.pdf, and appendix.pdf into final-package.pdf. Preserve the order I listed.

Fill a Form Safely

Use the pdf skill to fill application.pdf with the values in answers.txt. First check whether it has fillable fields, then validate the completed output.

Build a Batch Extraction Workflow

Use the pdf skill to design a local workflow that extracts tables from every PDF in ./reports and writes one spreadsheet per source file. Include validation steps for failed pages.

Best Practices

Run helper scripts in a dedicated working directory with trusted input PDFs.
Inspect generated PDFs visually before sending them to another person or system.
Keep original source PDFs unchanged and write outputs to clearly named new files.

Avoid

Do not run batch operations across directories that contain unrelated private documents.
Do not assume scanned PDFs contain machine-readable text without OCR verification.
Do not submit form values before validating field IDs, page numbers, and output appearance.