📦
Audit History
pdf - 5 audits
Version comparison
Capability and finding changes across audited versions, newest first.
| Version | Date | Result | Review items | Change vs previous |
|---|---|---|---|---|
| v5 Latest | Jul 9, 2026, 02:28 PM | No confirmed findings | 25 | No capability change |
| v4 | Jul 9, 2026, 02:28 PM | No confirmed findings | 25 | No capability change |
| v3 | Jul 7, 2026, 01:38 AM | No confirmed findings | 3 | No capability change |
| v2 | Jun 30, 2026, 06:26 PM | 1 confirmed | 0 | No capability change |
| v1 | Feb 24, 2026, 06:44 PM | No confirmed findings | 2 | Baseline |
Audit version 5 Latest
Jul 9, 2026, 02:28 PM
No prompt injection, malicious network behavior, or data-exfiltration intent was found. Most external-command and blocker findings are false positives from markdown formatting, JavaScript template literals, comments, or PDF field identifiers; the confirmed findings are expected local filesystem reads and writes used for PDF processing.
12
Files scanned
1,909
Lines analyzed
28
Review items
0
False positives ignored
Capability review items (25)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Medium
Node.js fs operations
const existingPdfBytes = fs.readFileSync('input.pdf');
The reference example reads local PDF files from disk. This is expected for PDF processing, but it is real filesystem access that could expose unintended files if paths are chosen poorly.
Medium
Node.js fs operations
fs.writeFileSync('modified.pdf', pdfBytes);
The guide or reference example writes generated PDF, text, image, or JSON output to local paths. This is expected behavior, but it can overwrite files or create outputs in unintended locations.
Medium
Node.js fs operations
fs.writeFileSync('created.pdf', pdfBytes);
The guide or reference example writes generated PDF, text, image, or JSON output to local paths. This is expected behavior, but it can overwrite files or create outputs in unintended locations.
Medium
Node.js fs operations
const pdf1Bytes = fs.readFileSync('doc1.pdf');
The reference example reads local PDF files from disk. This is expected for PDF processing, but it is real filesystem access that could expose unintended files if paths are chosen poorly.
Medium
Node.js fs operations
const pdf2Bytes = fs.readFileSync('doc2.pdf');
The reference example reads local PDF files from disk. This is expected for PDF processing, but it is real filesystem access that could expose unintended files if paths are chosen poorly.
Medium
Node.js fs operations
fs.writeFileSync('merged.pdf', mergedPdfBytes);
The guide or reference example writes generated PDF, text, image, or JSON output to local paths. This is expected behavior, but it can overwrite files or create outputs in unintended locations.
Medium
Synchronous file operations
const existingPdfBytes = fs.readFileSync('input.pdf');
The reference example reads local PDF files from disk. This is expected for PDF processing, but it is real filesystem access that could expose unintended files if paths are chosen poorly.
Medium
Synchronous file operations
fs.writeFileSync('modified.pdf', pdfBytes);
The guide or reference example writes generated PDF, text, image, or JSON output to local paths. This is expected behavior, but it can overwrite files or create outputs in unintended locations.
Medium
Synchronous file operations
fs.writeFileSync('created.pdf', pdfBytes);
The guide or reference example writes generated PDF, text, image, or JSON output to local paths. This is expected behavior, but it can overwrite files or create outputs in unintended locations.
Medium
Synchronous file operations
const pdf1Bytes = fs.readFileSync('doc1.pdf');
The reference example reads local PDF files from disk. This is expected for PDF processing, but it is real filesystem access that could expose unintended files if paths are chosen poorly.
Medium
Synchronous file operations
const pdf2Bytes = fs.readFileSync('doc2.pdf');
The reference example reads local PDF files from disk. This is expected for PDF processing, but it is real filesystem access that could expose unintended files if paths are chosen poorly.
Medium
Synchronous file operations
fs.writeFileSync('merged.pdf', mergedPdfBytes);
The guide or reference example writes generated PDF, text, image, or JSON output to local paths. This is expected behavior, but it can overwrite files or create outputs in unintended locations.
Medium
Python file write/append
with open("batch_merged.pdf", "wb") as output:
The guide or reference example writes generated PDF, text, image, or JSON output to local paths. This is expected behavior, but it can overwrite files or create outputs in unintended locations.
Medium
Python file write/append
with open(output_file, 'w', encoding='utf-8') as f:
The guide or reference example writes generated PDF, text, image, or JSON output to local paths. This is expected behavior, but it can overwrite files or create outputs in unintended locations.
Medium
Python file write/append
with open("cropped.pdf", "wb") as output:
The guide or reference example writes generated PDF, text, image, or JSON output to local paths. This is expected behavior, but it can overwrite files or create outputs in unintended locations.
Medium
Python file write/append
with open(f"chunk_{start_idx//chunk_size}.pdf", "wb") as output:
The guide or reference example writes generated PDF, text, image, or JSON output to local paths. This is expected behavior, but it can overwrite files or create outputs in unintended locations.
Medium
Python file write/append
with open(json_output_path, "w") as f:
The shipped script writes output JSON or PDF data to a command-line path. This is intended functionality, but it is real local file write capability and can overwrite existing files.
Medium
Python file write/append
with open(output_pdf_path, "wb") as f:
The shipped script writes output JSON or PDF data to a command-line path. This is intended functionality, but it is real local file write capability and can overwrite existing files.
Medium
Python file write/append
with open(output_pdf_path, "wb") as output:
The shipped script writes output JSON or PDF data to a command-line path. This is intended functionality, but it is real local file write capability and can overwrite existing files.
Medium
Python file write/append
with open("merged.pdf", "wb") as output:
The guide or reference example writes generated PDF, text, image, or JSON output to local paths. This is expected behavior, but it can overwrite files or create outputs in unintended locations.
Medium
Python file write/append
with open(f"page_{i+1}.pdf", "wb") as output:
The guide or reference example writes generated PDF, text, image, or JSON output to local paths. This is expected behavior, but it can overwrite files or create outputs in unintended locations.
Medium
Python file write/append
with open("rotated.pdf", "wb") as output:
The guide or reference example writes generated PDF, text, image, or JSON output to local paths. This is expected behavior, but it can overwrite files or create outputs in unintended locations.
Medium
Python file write/append
with open("watermarked.pdf", "wb") as output:
The guide or reference example writes generated PDF, text, image, or JSON output to local paths. This is expected behavior, but it can overwrite files or create outputs in unintended locations.
Medium
Python file write/append
with open("encrypted.pdf", "wb") as output:
The guide or reference example writes generated PDF, text, image, or JSON output to local paths. This is expected behavior, but it can overwrite files or create outputs in unintended locations.
Low
Python glob/pattern matching
pdf_files = glob.glob(os.path.join(input_dir, "*.pdf"))
The batch-processing example enumerates PDF files in a user-supplied directory with glob. This is legitimate for PDF batching, but it can access more local files than intended if scoped poorly.
Risk Factors
⚙️ External commands (62)
forms.md:60-73 reference.md:64-78 reference.md:186-206 reference.md:227-242 reference.md:257-258 reference.md:258-259 reference.md:259-263 scripts/check_bounding_boxes.py:6 scripts/check_bounding_boxes.py:41 scripts/check_bounding_boxes.py:43 scripts/check_bounding_boxes.py:53 scripts/check_bounding_boxes.py:66 scripts/convert_pdf_to_images.py:14 scripts/create_validation_image.py:12 scripts/extract_form_field_info.py:11 scripts/extract_form_field_info.py:38 scripts/fill_fillable_fields.py:34 scripts/fill_fillable_fields.py:37 scripts/fill_fillable_fields.py:84 scripts/fill_fillable_fields.py:86 scripts/fill_fillable_fields.py:87 scripts/fill_fillable_fields.py:88 scripts/fill_fillable_fields.py:89 scripts/fill_pdf_form_with_annotations.py:8 scripts/fill_pdf_form_with_annotations.py:31 SKILL.md:15-26 SKILL.md:26-33 SKILL.md:33-44 SKILL.md:44-47 SKILL.md:47-54 SKILL.md:54-57 SKILL.md:57-64 SKILL.md:64-67 SKILL.md:67-77 SKILL.md:77-82 SKILL.md:82-89 SKILL.md:89-92 SKILL.md:92-100 SKILL.md:100-103 SKILL.md:103-119 SKILL.md:119-124 SKILL.md:124-140 SKILL.md:140-143 SKILL.md:143-167 SKILL.md:167-172 SKILL.md:172-181 SKILL.md:181-184 SKILL.md:184-197 SKILL.md:197-200 SKILL.md:200-209 SKILL.md:209-214 SKILL.md:214-230 SKILL.md:230-233 SKILL.md:233-249 SKILL.md:249-252 SKILL.md:252-257 SKILL.md:257-260 SKILL.md:260-274 SKILL.md:274-280 SKILL.md:280-282 SKILL.md:282-283 SKILL.md:283-285
📁 Filesystem access (25)
reference.md:59 reference.md:76 reference.md:137 reference.md:151 reference.md:152 reference.md:166 reference.md:59 reference.md:76 reference.md:137 reference.md:151 reference.md:152 reference.md:166 reference.md:488 reference.md:500 reference.md:524 reference.md:563 reference.md:474 scripts/extract_form_field_info.py:143 scripts/fill_fillable_fields.py:55 scripts/fill_pdf_form_with_annotations.py:93 SKILL.md:42 SKILL.md:52 SKILL.md:75 SKILL.md:247 SKILL.md:272
Audited by: codex
Jul 9, 2026, 02:28 PM
No prompt injection, malicious network behavior, or data-exfiltration intent was found. Most external-command and blocker findings are false positives from markdown formatting, JavaScript template literals, comments, or PDF field identifiers; the confirmed findings are expected local filesystem reads and writes used for PDF processing.
12
Files scanned
1,909
Lines analyzed
28
Review items
0
False positives ignored
Capability review items (25)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Medium
Node.js fs operations
const existingPdfBytes = fs.readFileSync('input.pdf');
The reference example reads local PDF files from disk. This is expected for PDF processing, but it is real filesystem access that could expose unintended files if paths are chosen poorly.
Medium
Node.js fs operations
fs.writeFileSync('modified.pdf', pdfBytes);
The guide or reference example writes generated PDF, text, image, or JSON output to local paths. This is expected behavior, but it can overwrite files or create outputs in unintended locations.
Medium
Node.js fs operations
fs.writeFileSync('created.pdf', pdfBytes);
The guide or reference example writes generated PDF, text, image, or JSON output to local paths. This is expected behavior, but it can overwrite files or create outputs in unintended locations.
Medium
Node.js fs operations
const pdf1Bytes = fs.readFileSync('doc1.pdf');
The reference example reads local PDF files from disk. This is expected for PDF processing, but it is real filesystem access that could expose unintended files if paths are chosen poorly.
Medium
Node.js fs operations
const pdf2Bytes = fs.readFileSync('doc2.pdf');
The reference example reads local PDF files from disk. This is expected for PDF processing, but it is real filesystem access that could expose unintended files if paths are chosen poorly.
Medium
Node.js fs operations
fs.writeFileSync('merged.pdf', mergedPdfBytes);
The guide or reference example writes generated PDF, text, image, or JSON output to local paths. This is expected behavior, but it can overwrite files or create outputs in unintended locations.
Medium
Synchronous file operations
const existingPdfBytes = fs.readFileSync('input.pdf');
The reference example reads local PDF files from disk. This is expected for PDF processing, but it is real filesystem access that could expose unintended files if paths are chosen poorly.
Medium
Synchronous file operations
fs.writeFileSync('modified.pdf', pdfBytes);
The guide or reference example writes generated PDF, text, image, or JSON output to local paths. This is expected behavior, but it can overwrite files or create outputs in unintended locations.
Medium
Synchronous file operations
fs.writeFileSync('created.pdf', pdfBytes);
The guide or reference example writes generated PDF, text, image, or JSON output to local paths. This is expected behavior, but it can overwrite files or create outputs in unintended locations.
Medium
Synchronous file operations
const pdf1Bytes = fs.readFileSync('doc1.pdf');
The reference example reads local PDF files from disk. This is expected for PDF processing, but it is real filesystem access that could expose unintended files if paths are chosen poorly.
Medium
Synchronous file operations
const pdf2Bytes = fs.readFileSync('doc2.pdf');
The reference example reads local PDF files from disk. This is expected for PDF processing, but it is real filesystem access that could expose unintended files if paths are chosen poorly.
Medium
Synchronous file operations
fs.writeFileSync('merged.pdf', mergedPdfBytes);
The guide or reference example writes generated PDF, text, image, or JSON output to local paths. This is expected behavior, but it can overwrite files or create outputs in unintended locations.
Medium
Python file write/append
with open("batch_merged.pdf", "wb") as output:
The guide or reference example writes generated PDF, text, image, or JSON output to local paths. This is expected behavior, but it can overwrite files or create outputs in unintended locations.
Medium
Python file write/append
with open(output_file, 'w', encoding='utf-8') as f:
The guide or reference example writes generated PDF, text, image, or JSON output to local paths. This is expected behavior, but it can overwrite files or create outputs in unintended locations.
Medium
Python file write/append
with open("cropped.pdf", "wb") as output:
The guide or reference example writes generated PDF, text, image, or JSON output to local paths. This is expected behavior, but it can overwrite files or create outputs in unintended locations.
Medium
Python file write/append
with open(f"chunk_{start_idx//chunk_size}.pdf", "wb") as output:
The guide or reference example writes generated PDF, text, image, or JSON output to local paths. This is expected behavior, but it can overwrite files or create outputs in unintended locations.
Medium
Python file write/append
with open(json_output_path, "w") as f:
The shipped script writes output JSON or PDF data to a command-line path. This is intended functionality, but it is real local file write capability and can overwrite existing files.
Medium
Python file write/append
with open(output_pdf_path, "wb") as f:
The shipped script writes output JSON or PDF data to a command-line path. This is intended functionality, but it is real local file write capability and can overwrite existing files.
Medium
Python file write/append
with open(output_pdf_path, "wb") as output:
The shipped script writes output JSON or PDF data to a command-line path. This is intended functionality, but it is real local file write capability and can overwrite existing files.
Medium
Python file write/append
with open("merged.pdf", "wb") as output:
The guide or reference example writes generated PDF, text, image, or JSON output to local paths. This is expected behavior, but it can overwrite files or create outputs in unintended locations.
Medium
Python file write/append
with open(f"page_{i+1}.pdf", "wb") as output:
The guide or reference example writes generated PDF, text, image, or JSON output to local paths. This is expected behavior, but it can overwrite files or create outputs in unintended locations.
Medium
Python file write/append
with open("rotated.pdf", "wb") as output:
The guide or reference example writes generated PDF, text, image, or JSON output to local paths. This is expected behavior, but it can overwrite files or create outputs in unintended locations.
Medium
Python file write/append
with open("watermarked.pdf", "wb") as output:
The guide or reference example writes generated PDF, text, image, or JSON output to local paths. This is expected behavior, but it can overwrite files or create outputs in unintended locations.
Medium
Python file write/append
with open("encrypted.pdf", "wb") as output:
The guide or reference example writes generated PDF, text, image, or JSON output to local paths. This is expected behavior, but it can overwrite files or create outputs in unintended locations.
Low
Python glob/pattern matching
pdf_files = glob.glob(os.path.join(input_dir, "*.pdf"))
The batch-processing example enumerates PDF files in a user-supplied directory with glob. This is legitimate for PDF batching, but it can access more local files than intended if scoped poorly.
Risk Factors
⚙️ External commands (62)
forms.md:60-73 reference.md:64-78 reference.md:186-206 reference.md:227-242 reference.md:257-258 reference.md:258-259 reference.md:259-263 scripts/check_bounding_boxes.py:6 scripts/check_bounding_boxes.py:41 scripts/check_bounding_boxes.py:43 scripts/check_bounding_boxes.py:53 scripts/check_bounding_boxes.py:66 scripts/convert_pdf_to_images.py:14 scripts/create_validation_image.py:12 scripts/extract_form_field_info.py:11 scripts/extract_form_field_info.py:38 scripts/fill_fillable_fields.py:34 scripts/fill_fillable_fields.py:37 scripts/fill_fillable_fields.py:84 scripts/fill_fillable_fields.py:86 scripts/fill_fillable_fields.py:87 scripts/fill_fillable_fields.py:88 scripts/fill_fillable_fields.py:89 scripts/fill_pdf_form_with_annotations.py:8 scripts/fill_pdf_form_with_annotations.py:31 SKILL.md:15-26 SKILL.md:26-33 SKILL.md:33-44 SKILL.md:44-47 SKILL.md:47-54 SKILL.md:54-57 SKILL.md:57-64 SKILL.md:64-67 SKILL.md:67-77 SKILL.md:77-82 SKILL.md:82-89 SKILL.md:89-92 SKILL.md:92-100 SKILL.md:100-103 SKILL.md:103-119 SKILL.md:119-124 SKILL.md:124-140 SKILL.md:140-143 SKILL.md:143-167 SKILL.md:167-172 SKILL.md:172-181 SKILL.md:181-184 SKILL.md:184-197 SKILL.md:197-200 SKILL.md:200-209 SKILL.md:209-214 SKILL.md:214-230 SKILL.md:230-233 SKILL.md:233-249 SKILL.md:249-252 SKILL.md:252-257 SKILL.md:257-260 SKILL.md:260-274 SKILL.md:274-280 SKILL.md:280-282 SKILL.md:282-283 SKILL.md:283-285
📁 Filesystem access (25)
reference.md:59 reference.md:76 reference.md:137 reference.md:151 reference.md:152 reference.md:166 reference.md:59 reference.md:76 reference.md:137 reference.md:151 reference.md:152 reference.md:166 reference.md:488 reference.md:500 reference.md:524 reference.md:563 reference.md:474 scripts/extract_form_field_info.py:143 scripts/fill_fillable_fields.py:55 scripts/fill_pdf_form_with_annotations.py:93 SKILL.md:42 SKILL.md:52 SKILL.md:75 SKILL.md:247 SKILL.md:272
Audited by: codex
Jul 7, 2026, 01:38 AM
No malware, data exfiltration, or prompt injection evidence was found in the reviewed files. Most static hits are Markdown fences, JavaScript template literals, comments, documentation URLs, or expected PDF examples. Three helper scripts write to caller-provided output paths, so users should control destinations and avoid accidental overwrite.
12
Files scanned
1,909
Lines analyzed
6
Review items
0
False positives ignored
Capability review items (3)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Medium
Python file write/append
with open(json_output_path, "w") as f:
The script writes extracted field metadata to json_output_path supplied on the command line without path restriction. This intended output can overwrite a local file if invoked with an unsafe path.
Medium
Python file write/append
with open(output_pdf_path, "wb") as f:
The script writes the completed PDF to output_pdf_path supplied on the command line without path restriction. This intended output can overwrite a local file if invoked with an unsafe path.
Medium
Python file write/append
with open(output_pdf_path, "wb") as output:
The script writes an annotated PDF to output_pdf_path supplied on the command line without path restriction. This intended output can overwrite a local file if invoked with an unsafe path.
Risk Factors
⚙️ External commands (62)
forms.md:60-73 reference.md:64-78 reference.md:186-206 reference.md:227-242 reference.md:257-258 reference.md:258-259 reference.md:259-263 scripts/check_bounding_boxes.py:6 scripts/check_bounding_boxes.py:41 scripts/check_bounding_boxes.py:43 scripts/check_bounding_boxes.py:53 scripts/check_bounding_boxes.py:66 scripts/convert_pdf_to_images.py:14 scripts/create_validation_image.py:12 scripts/extract_form_field_info.py:11 scripts/extract_form_field_info.py:38 scripts/fill_fillable_fields.py:34 scripts/fill_fillable_fields.py:37 scripts/fill_fillable_fields.py:84 scripts/fill_fillable_fields.py:86 scripts/fill_fillable_fields.py:87 scripts/fill_fillable_fields.py:88 scripts/fill_fillable_fields.py:89 scripts/fill_pdf_form_with_annotations.py:8 scripts/fill_pdf_form_with_annotations.py:31 SKILL.md:15-26 SKILL.md:26-33 SKILL.md:33-44 SKILL.md:44-47 SKILL.md:47-54 SKILL.md:54-57 SKILL.md:57-64 SKILL.md:64-67 SKILL.md:67-77 SKILL.md:77-82 SKILL.md:82-89 SKILL.md:89-92 SKILL.md:92-100 SKILL.md:100-103 SKILL.md:103-119 SKILL.md:119-124 SKILL.md:124-140 SKILL.md:140-143 SKILL.md:143-167 SKILL.md:167-172 SKILL.md:172-181 SKILL.md:181-184 SKILL.md:184-197 SKILL.md:197-200 SKILL.md:200-209 SKILL.md:209-214 SKILL.md:214-230 SKILL.md:230-233 SKILL.md:233-249 SKILL.md:249-252 SKILL.md:252-257 SKILL.md:257-260 SKILL.md:260-274 SKILL.md:274-280 SKILL.md:280-282 SKILL.md:282-283 SKILL.md:283-285
📁 Filesystem access (25)
reference.md:59 reference.md:76 reference.md:137 reference.md:151 reference.md:152 reference.md:166 reference.md:59 reference.md:76 reference.md:137 reference.md:151 reference.md:152 reference.md:166 reference.md:488 reference.md:500 reference.md:524 reference.md:563 reference.md:474 scripts/extract_form_field_info.py:143 scripts/fill_fillable_fields.py:55 scripts/fill_pdf_form_with_annotations.py:93 SKILL.md:42 SKILL.md:52 SKILL.md:75 SKILL.md:247 SKILL.md:272
Audited by: codex
Jun 30, 2026, 06:26 PM
Static analysis reported many high-risk patterns, but review found them to be false positives from Markdown examples, comments, and sample data. The only real concern is expected filesystem access for reading PDFs and writing user-selected outputs. No evidence found of prompt injection, credential access, network exfiltration, or malicious command execution.
12
Files scanned
1,909
Lines analyzed
4
Review items
4
False positives ignored
Confirmed security concerns (1)
Low
scripts/extract_form_field_info.py:143scripts/fill_fillable_fields.py:55scripts/fill_pdf_form_with_annotations.py:93
Expected Filesystem Output Writes
TRUE_POSITIVE: Helper scripts write JSON, image, and PDF outputs to paths supplied by the user. This is expected for PDF processing.
The write operations are direct and easy to verify. Risk is low because output paths are explicit CLI arguments for document processing.
Static false positives ignored (4)
These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.
Low
Markdown Command Examples Flagged as Execution
FALSE_POSITIVE: Command examples appear in Markdown code blocks and inline instructions. They document standard PDF tools and are not executed by the skill.
The cited locations are Markdown examples for qpdf, pdftotext, pdfimages, and helper scripts. The Python scripts do not invoke shell commands.
Low
LICENSE.txt:8-9scripts/extract_form_field_info.py:32scripts/extract_form_field_info.py:81scripts/fill_pdf_form_with_annotations.py:78
Documentation URLs Flagged as Network Activity
FALSE_POSITIVE: Hardcoded URLs are license terms, PDF references, and issue links. No code sends document data to those URLs.
The URLs appear in a license file and code comments only. No HTTP client, fetch call, or outbound request was found.
Low
Weak Crypto and C2 Keyword Matches Are Incidental
FALSE_POSITIVE: High-severity keyword matches occur in PDF examples, test data, and benign command text. No cryptographic logic or C2 behavior is present.
The cited lines contain sample fields, file names, or PDF commands. They do not implement encryption, hashing, callbacks, or remote control.
Low
Prompt Injection Review Found No Malicious Override
FALSE_POSITIVE: The skill contains workflow instructions for PDF forms. No text asks reviewers to skip analysis, lower risk, or ignore system instructions.
The wording is imperative, but it stays within the PDF form workflow. It does not target the marketplace evaluator or security process.
Risk Factors
⚙️ External commands (6)
🌐 Network access (4)
Audited by: codex
Feb 24, 2026, 06:44 PM
Static analysis detected 219 patterns across 12 files, but all are false positives. The 'external_commands' are markdown documentation code blocks, not executable code. 'Weak cryptographic algorithm' warnings are from test files using MD5 for non-security test data generation. 'C2 keywords' and 'system reconnaissance' are CLI argument parsing and legitimate system calls. The skill performs legitimate PDF processing using Python libraries (pypdf, pdfplumber, reportlab). Low risk due to filesystem operations and external tool dependencies (poppler-utils, qpdf) that require user-provided file paths.
12
Files scanned
1,909
Lines analyzed
5
Review items
0
False positives ignored
Capability review items (2)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Low
scripts/extract_form_field_info.py:141-144scripts/fill_fillable_fields.py:55scripts/fill_pdf_form_with_annotations.py:93
Filesystem Write Operations
Scripts write output PDF and JSON files to disk. User controls file paths via CLI arguments, minimizing risk.
Confirmed file write operations in Python scripts using open() with user-provided paths. Low risk because paths are CLI arguments, not user input from untrusted sources.
Low
External Tool Dependencies
Documentation references external CLI tools (qpdf, pdftotext, pdfimages) that execute shell commands. These are documented usage patterns, not embedded malicious code.
Documentation shows legitimate use of standard PDF utilities (poppler-utils, qpdf). Commands are examples for users to run manually, not automated execution.
Risk Factors
⚙️ External commands (4)
🌐 Network access (1)
Audited by: claude