📦

pdf

Name: pdf
Author: sickn33

Content revision r1 Safe ⚙️ External commands📁 Filesystem access🌐 Network access

Process PDFs, Forms, and Tables

PDF work often needs extraction, conversion, form filling, and document assembly. This skill guides Claude, Codex, and Claude Code through practical PDF workflows.

Supports: Claude Codex Code(CC)

🥉 78 Bronze

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "pdf" from https://skillstore.io/skills/sickn33-pdf.md and its manifest at https://skillstore.io/api/skills/sickn33-pdf/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/sickn33-pdf.md Signed manifest GET /api/skills/sickn33-pdf/manifest Signed lockfile GET /api/skills/sickn33-pdf/lockfile

Test it

Using "pdf". User asks to extract tables from a financial PDF report.

Expected outcome:

A list of detected tables by page, exported spreadsheet filenames, and notes for pages with weak table structure.

Using "pdf". User provides a benefits enrollment form and personal field values.

Expected outcome:

A completed PDF form plus a short validation summary showing matched fields and unresolved entries.

Using "pdf". User asks to merge several PDF packets and add a watermark.

Expected outcome:

A merged and watermarked PDF with a concise record of source order, page counts, and output path.

Security Audit

Safe

v5 • 7/9/2026 Open versioned report

No prompt injection, malicious network behavior, or data-exfiltration intent was found. Most external-command and blocker findings are false positives from markdown formatting, JavaScript template literals, comments, or PDF field identifiers; the confirmed findings are expected local filesystem reads and writes used for PDF processing.

Files scanned

1,909

Lines analyzed

Review items

False positives ignored

Capability review items (25)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium

reference.md:59

Node.js fs operations

const existingPdfBytes = fs.readFileSync('input.pdf');

The reference example reads local PDF files from disk. This is expected for PDF processing, but it is real filesystem access that could expose unintended files if paths are chosen poorly.

Medium

reference.md:76

Node.js fs operations

fs.writeFileSync('modified.pdf', pdfBytes);

The guide or reference example writes generated PDF, text, image, or JSON output to local paths. This is expected behavior, but it can overwrite files or create outputs in unintended locations.

Medium

reference.md:137

Node.js fs operations

fs.writeFileSync('created.pdf', pdfBytes);

The guide or reference example writes generated PDF, text, image, or JSON output to local paths. This is expected behavior, but it can overwrite files or create outputs in unintended locations.

Medium

reference.md:151

Node.js fs operations

const pdf1Bytes = fs.readFileSync('doc1.pdf');

The reference example reads local PDF files from disk. This is expected for PDF processing, but it is real filesystem access that could expose unintended files if paths are chosen poorly.

Medium

reference.md:152

Node.js fs operations

const pdf2Bytes = fs.readFileSync('doc2.pdf');

The reference example reads local PDF files from disk. This is expected for PDF processing, but it is real filesystem access that could expose unintended files if paths are chosen poorly.

Medium

reference.md:166

Node.js fs operations

fs.writeFileSync('merged.pdf', mergedPdfBytes);

The guide or reference example writes generated PDF, text, image, or JSON output to local paths. This is expected behavior, but it can overwrite files or create outputs in unintended locations.

Medium

reference.md:59

Synchronous file operations

const existingPdfBytes = fs.readFileSync('input.pdf');

The reference example reads local PDF files from disk. This is expected for PDF processing, but it is real filesystem access that could expose unintended files if paths are chosen poorly.

Medium

reference.md:76

Synchronous file operations

fs.writeFileSync('modified.pdf', pdfBytes);

The guide or reference example writes generated PDF, text, image, or JSON output to local paths. This is expected behavior, but it can overwrite files or create outputs in unintended locations.

Medium

reference.md:137

Synchronous file operations

fs.writeFileSync('created.pdf', pdfBytes);

The guide or reference example writes generated PDF, text, image, or JSON output to local paths. This is expected behavior, but it can overwrite files or create outputs in unintended locations.

Medium

reference.md:151

Synchronous file operations

const pdf1Bytes = fs.readFileSync('doc1.pdf');

The reference example reads local PDF files from disk. This is expected for PDF processing, but it is real filesystem access that could expose unintended files if paths are chosen poorly.

Medium

reference.md:152

Synchronous file operations

const pdf2Bytes = fs.readFileSync('doc2.pdf');

The reference example reads local PDF files from disk. This is expected for PDF processing, but it is real filesystem access that could expose unintended files if paths are chosen poorly.

Medium

reference.md:166

Synchronous file operations

fs.writeFileSync('merged.pdf', mergedPdfBytes);

The guide or reference example writes generated PDF, text, image, or JSON output to local paths. This is expected behavior, but it can overwrite files or create outputs in unintended locations.

Medium

reference.md:488

Python file write/append

with open("batch_merged.pdf", "wb") as output:

The guide or reference example writes generated PDF, text, image, or JSON output to local paths. This is expected behavior, but it can overwrite files or create outputs in unintended locations.

Medium

reference.md:500

Python file write/append

with open(output_file, 'w', encoding='utf-8') as f:

The guide or reference example writes generated PDF, text, image, or JSON output to local paths. This is expected behavior, but it can overwrite files or create outputs in unintended locations.

Medium

reference.md:524

Python file write/append

with open("cropped.pdf", "wb") as output:

The guide or reference example writes generated PDF, text, image, or JSON output to local paths. This is expected behavior, but it can overwrite files or create outputs in unintended locations.

Medium

reference.md:563

Python file write/append

with open(f"chunk_{start_idx//chunk_size}.pdf", "wb") as output:

The guide or reference example writes generated PDF, text, image, or JSON output to local paths. This is expected behavior, but it can overwrite files or create outputs in unintended locations.

Medium

scripts/extract_form_field_info.py:143

Python file write/append

with open(json_output_path, "w") as f:

The shipped script writes output JSON or PDF data to a command-line path. This is intended functionality, but it is real local file write capability and can overwrite existing files.

Medium

scripts/fill_fillable_fields.py:55

Python file write/append

with open(output_pdf_path, "wb") as f:

The shipped script writes output JSON or PDF data to a command-line path. This is intended functionality, but it is real local file write capability and can overwrite existing files.

Medium

scripts/fill_pdf_form_with_annotations.py:93

Python file write/append

with open(output_pdf_path, "wb") as output:

The shipped script writes output JSON or PDF data to a command-line path. This is intended functionality, but it is real local file write capability and can overwrite existing files.

Medium

SKILL.md:42

Python file write/append

with open("merged.pdf", "wb") as output:

The guide or reference example writes generated PDF, text, image, or JSON output to local paths. This is expected behavior, but it can overwrite files or create outputs in unintended locations.

Medium

SKILL.md:52

Python file write/append

with open(f"page_{i+1}.pdf", "wb") as output:

The guide or reference example writes generated PDF, text, image, or JSON output to local paths. This is expected behavior, but it can overwrite files or create outputs in unintended locations.

Medium

SKILL.md:75

Python file write/append

with open("rotated.pdf", "wb") as output:

The guide or reference example writes generated PDF, text, image, or JSON output to local paths. This is expected behavior, but it can overwrite files or create outputs in unintended locations.

Medium

SKILL.md:247

Python file write/append

with open("watermarked.pdf", "wb") as output:

The guide or reference example writes generated PDF, text, image, or JSON output to local paths. This is expected behavior, but it can overwrite files or create outputs in unintended locations.

Medium

SKILL.md:272

Python file write/append

with open("encrypted.pdf", "wb") as output:

The guide or reference example writes generated PDF, text, image, or JSON output to local paths. This is expected behavior, but it can overwrite files or create outputs in unintended locations.

Low

reference.md:474

Python glob/pattern matching

pdf_files = glob.glob(os.path.join(input_dir, "*.pdf"))

The batch-processing example enumerates PDF files in a user-supplied directory with glob. This is legitimate for PDF batching, but it can access more local files than intended if scoped poorly.

Risk Factors

⚙️ External commands (62)

forms.md:60-73 reference.md:64-78 reference.md:186-206 reference.md:227-242 reference.md:257-258 reference.md:258-259 reference.md:259-263 scripts/check_bounding_boxes.py:6 scripts/check_bounding_boxes.py:41 scripts/check_bounding_boxes.py:43 scripts/check_bounding_boxes.py:53 scripts/check_bounding_boxes.py:66 scripts/convert_pdf_to_images.py:14 scripts/create_validation_image.py:12 scripts/extract_form_field_info.py:11 scripts/extract_form_field_info.py:38 scripts/fill_fillable_fields.py:34 scripts/fill_fillable_fields.py:37 scripts/fill_fillable_fields.py:84 scripts/fill_fillable_fields.py:86 scripts/fill_fillable_fields.py:87 scripts/fill_fillable_fields.py:88 scripts/fill_fillable_fields.py:89 scripts/fill_pdf_form_with_annotations.py:8 scripts/fill_pdf_form_with_annotations.py:31 SKILL.md:15-26 SKILL.md:26-33 SKILL.md:33-44 SKILL.md:44-47 SKILL.md:47-54 SKILL.md:54-57 SKILL.md:57-64 SKILL.md:64-67 SKILL.md:67-77 SKILL.md:77-82 SKILL.md:82-89 SKILL.md:89-92 SKILL.md:92-100 SKILL.md:100-103 SKILL.md:103-119 SKILL.md:119-124 SKILL.md:124-140 SKILL.md:140-143 SKILL.md:143-167 SKILL.md:167-172 SKILL.md:172-181 SKILL.md:181-184 SKILL.md:184-197 SKILL.md:197-200 SKILL.md:200-209 SKILL.md:209-214 SKILL.md:214-230 SKILL.md:230-233 SKILL.md:233-249 SKILL.md:249-252 SKILL.md:252-257 SKILL.md:257-260 SKILL.md:260-274 SKILL.md:274-280 SKILL.md:280-282 SKILL.md:282-283 SKILL.md:283-285

📁 Filesystem access (25)

🌐 Network access (3)

scripts/extract_form_field_info.py:32 scripts/extract_form_field_info.py:81 scripts/fill_pdf_form_with_annotations.py:78

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/sickn33-pdf/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/sickn33-pdf/security.svg)](https://skillstore.io/skills/sickn33-pdf?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/sickn33-pdf?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-pdf/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/sickn33-pdf.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

sickn33. (2026). pdf security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-pdf/audits/5

BibTeX citation

@techreport{sickn33-sickn33-pdf-2026,
  author = {sickn33},
  title = {pdf security audit report (audit version 5)},
  institution = {Skillstore},
  year = {2026},
  number = {5},
  url = {https://skillstore.io/skills/sickn33-pdf/audits/5},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "pdf security audit report (audit version 5)"
version: "unspecified"
type: report
authors:
  - name: "sickn33"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/sickn33-pdf/audits/5"
identifiers:
  - type: other
    value: "skillstore:sickn33-pdf:audit:5"
    description: "Skillstore immutable audit report identifier"

Compare variants

13 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Highest Skillstore Score

Author / source Skillstore Score Evidence Confidence Skillstore usage Updated

ZhanlinCui Recommended

zhanlincui-pdf

Skillstore Score 80

Evidence Confidence High

Skillstore usage 186

Updated

2026-08-21

davila7

davila7-pdf

Skillstore Score 79

Evidence Confidence High

Skillstore usage 23

Updated

2026-08-21

DYAI2025

dyai2025-pdf

Skillstore Score 79

Evidence Confidence High

Skillstore usage 18

Updated

2026-08-21

Azeem-2

azeem-2-pdf

Skillstore Score 79

Evidence Confidence High

Skillstore usage 16

Updated

2026-08-21

ArtemisAI

artemisai-pdf

Skillstore Score 79

Evidence Confidence High

Skillstore usage 13

Updated

2026-08-21

ComposioHQ

composiohq-pdf

Skillstore Score 79

Evidence Confidence High

Skillstore usage 12

Updated

2026-08-21

davila7

davila7-pdf-processing

Skillstore Score 79

Evidence Confidence High

Skillstore usage 9

Updated

2026-08-21

anthropics

pdf

Skillstore Score 78

Evidence Confidence High

Skillstore usage 149

Updated

2026-08-21

92Bilal26

92bilal26-pdf

Skillstore Score 78

Evidence Confidence High

Skillstore usage 23

Updated

2026-08-21

Cam10001110101

cam10001110101-pdf

Skillstore Score 78

Evidence Confidence High

Skillstore usage 10

Updated

2026-08-21

sickn33 Current

sickn33-pdf

Skillstore Score 78

Evidence Confidence High

Skillstore usage 9

Updated

2026-08-21

K-Dense-AI

k-dense-ai-pdf

Skillstore Score 76

Evidence Confidence High

Skillstore usage 8

Updated

2026-08-21

AutumnsGrove

autumnsgrove-pdf

Skillstore Score 75

Evidence Confidence High

Skillstore usage 38

Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Prepare Client Forms

Fill structured or scanned PDF forms while validating field placement before final output.

Extract Document Data

Pull text, tables, images, and metadata from PDF collections for review or analysis.

Assemble Office Documents

Merge, split, rotate, watermark, crop, and protect PDF packets for routine office work.

Try These Prompts

Extract PDF Text

Extract all readable text from this PDF. Preserve page order, summarize key sections, and note any pages that appear scanned.

Fill a PDF Form

Check whether this PDF has fillable fields. Extract field information, map my provided values, validate them, and create a filled PDF.

Validate Non-Fillable Form Placement

Convert this non-fillable form to images, identify entry areas, create validation images, check bounding boxes, and add the requested text annotations.

Build a Batch PDF Workflow

Design a safe workflow to process every PDF in this folder, extract tables, save outputs, report failures, and avoid overwriting source files.

Best Practices

Work on copies of source PDFs and keep originals unchanged.
Use explicit input and output paths for every script or command.
Inspect validation images before adding annotations to non-fillable forms.

Avoid

Do not run batch operations on broad directories without checking the file list.
Do not overwrite source PDFs with generated output files.
Do not trust extracted form fields without visual review for important documents.