pdf-editor-compdf
Pass
Audited by Gen Agent Trust Hub on Apr 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads a proprietary command-line tool (
compdf_cli) from the official ComPDFKit distribution server (download.compdf.com) during the initial setup phase. - [COMMAND_EXECUTION]: The agent executes the downloaded
compdf_clibinary to perform PDF tasks such as splitting, merging, and compressing. On macOS, the skill useschmodto apply execution permissions to the binary. - [DATA_EXFILTRATION]: The skill collects a user-provided email address and sends it to the developer's license activation endpoint (
wms.compdf.com). This behavior is explicitly disclosed in the skill's documentation and requires user interaction.
Audit Metadata