compdf-ocr

Pass

Audited by Gen Agent Trust Hub on Aug 14, 2026

Risk Level: SAFE
Full Analysis
  • [CREDENTIALS_SAFE]: The skill implements a localized credential management system by reading from and writing to a specific api_key file within the skill's own directory. The instructions explicitly prohibit the agent from inspecting environment variables or other system paths and mandate that the key must not be displayed, logged, or included in request examples.
  • [COMMAND_EXECUTION]: The workflow requires the agent to obtain explicit user confirmation before uploading documents to the ComPDF API or performing operations that overwrite, delete, or modify files. This ensures human oversight for all network-bound data transfers and file system changes.
  • [DATA_EXPOSURE]: All network operations are directed to the official ComPDF Server API domains (compdf.com). The skill uses a routing parameter (sourceType=5) for vendor-specific integration tracking, which is a standard operational practice.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 14, 2026, 06:48 AM