pdf-tools-compdf
Pass
Audited by Gen Agent Trust Hub on Apr 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill interacts with the official ComPDF Cloud API servers (api-server.compdf.com and api-server.compdf.cn) to perform document processing tasks. These are authoritative domains for the skill's author, ComPDFKit.
- [SAFE]: Implements a mandatory 'External Upload Confirmation' step, ensuring the user provides explicit consent before any files are transmitted to external servers.
- [SAFE]: Manages API authentication securely by prompting the user for a public key at runtime and only saving it to a local configuration file (config/public_key.txt) with the user's explicit permission.
- [SAFE]: No evidence of prompt injection, code obfuscation, or unauthorized remote code execution was found. The skill relies on standard REST API communication using multipart/form-data for file uploads and JSON for parameters.
Audit Metadata