extract-from-pdfs

Fail

Audited by Socket on Mar 11, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill's stated purpose (structured data extraction from scientific PDFs with validation and export) is coherent with its capabilities and the described workflow. There are no evident supply-chain or credential-forwarding vectors, and installation relies on standard, reputable tools (conda environments, Ollama, and local models). Data flows appropriately from local inputs to external validation endpoints, with credentials managed via environment variables/config files. The risk profile is low to moderate (primarily around secure handling of API keys and data governance), and no anomalous or malicious behaviors are apparent within the provided fragment. Overall, the implementation appears benign and proportionate to its stated purpose, with standard security considerations around credential handling and data privacy.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 11, 2026, 03:47 AM
Package URL
pkg:socket/skills-sh/brunoasm%2Fmy_claude_skills%2Fextract-from-pdfs%2F@b41c28456c8541729ebc16bb2e082efa09805267
Security Audit — socket — extract-from-pdfs