Skills
skills/daymade/claude-code-skills/pdf-creator/Gen Agent Trust Hub

pdf-creator

Pass

Audited by Gen Agent Trust Hub on May 12, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill invokes several system binaries via subprocess.run, including pandoc for markdown conversion, pdftoppm and pdftotext (from Poppler) for preview generation and typography linting, and Google Chrome or Chromium for headless PDF rendering. These calls are essential for the skill's primary purpose and use local paths for input and output.
  • [COMMAND_EXECUTION]: Integration test scripts (e.g., test_cjk_code_blocks.py) use uv run and python -c to execute modular tests. This behavior is localized to the testing suite and does not involve untrusted remote code.
Audit Metadata
Risk Level
SAFE
Analyzed
May 12, 2026, 01:54 AM
Security Audit — agent-trust-hub — pdf-creator