skills/lovstudio/skills/lov-pdf2png/Gen Agent Trust Hub

lov-pdf2png

Pass

Audited by Gen Agent Trust Hub on Aug 24, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses a shell script (scripts/pdf2png.sh) to invoke /usr/bin/python3 with an inline Python script. The script utilizes the Quartz and AppKit frameworks via the pyobjc bridge to render PDF pages and stitch them into a single PNG image.
  • [REMOTE_CODE_EXECUTION]: While the skill instructs the user to pip install pyobjc-framework-Quartz, this is a standard dependency for accessing macOS native APIs from Python and is not used to execute untrusted remote code.
  • [DATA_EXPOSURE]: The skill processes local PDF files as requested by the user and writes the resulting PNG to the same directory. There are no network operations or exfiltration patterns identified.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 24, 2026, 12:55 AM
Security Audit — agent-trust-hub — lov-pdf2png