compdf-pdf-to-markdown
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements secure API key management by instructing the agent to read credentials from a designated local file (e.g.,
~/.config/compdf/api_key) rather than requiring them to be provided in the chat history. - [SAFE]: Instructions explicitly forbid the agent from displaying the API key in logs, examples, or any output, reducing the risk of accidental credential exposure.
- [SAFE]: The skill requires the agent to obtain explicit user confirmation before executing any task that involves document modification or external transmission, ensuring human-in-the-loop oversight for sensitive operations.
- [SAFE]: A synchronization script is included for maintainers to update the local API documentation from the official
compdf.comwebsite. This script uses standard libraries and communicates only with the vendor's verified domain.
Audit Metadata