extract-from-pdfs
Audited by Socket on Mar 11, 2026
1 alert found:
Obfuscated FileThe skill's stated purpose (structured data extraction from scientific PDFs with validation and export) is coherent with its capabilities and the described workflow. There are no evident supply-chain or credential-forwarding vectors, and installation relies on standard, reputable tools (conda environments, Ollama, and local models). Data flows appropriately from local inputs to external validation endpoints, with credentials managed via environment variables/config files. The risk profile is low to moderate (primarily around secure handling of API keys and data governance), and no anomalous or malicious behaviors are apparent within the provided fragment. Overall, the implementation appears benign and proportionate to its stated purpose, with standard security considerations around credential handling and data privacy.