compdf-convert-images-to-documents

Pass

Audited by Gen Agent Trust Hub on Aug 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill's primary purpose is to help the AI construct valid API requests for the ComPDF service. The workflow instructions emphasize secure handling of API keys by reading them from local configuration files and ensuring they are passed only via headers, never in logs or output.- [COMMAND_EXECUTION]: The skill includes a maintainer script (scripts/sync_official_api_reference.py) that uses the Python requests library to fetch documentation from the official compdf.com domain. This is a standard maintenance task for keeping the skill synchronized with API changes. The script uses a ThreadPoolExecutor and performs basic HTML parsing to extract text from documentation pages. All network operations target the vendor's own infrastructure.- [DATA_EXPOSURE]: The skill provides explicit instructions for the AI to find API keys in standard local configuration paths (~/.config/compdf/api_key or %USERPROFILE%\.compdf\api_key). It also includes a safety directive in the workflow to obtain user confirmation before performing operations that modify or send documents externally.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 14, 2026, 06:48 AM