lov-pdf2png
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a shell script (
scripts/pdf2png.sh) to invoke/usr/bin/python3with an inline Python script. The script utilizes theQuartzandAppKitframeworks via thepyobjcbridge to render PDF pages and stitch them into a single PNG image. - [REMOTE_CODE_EXECUTION]: While the skill instructs the user to
pip install pyobjc-framework-Quartz, this is a standard dependency for accessing macOS native APIs from Python and is not used to execute untrusted remote code. - [DATA_EXPOSURE]: The skill processes local PDF files as requested by the user and writes the resulting PNG to the same directory. There are no network operations or exfiltration patterns identified.
Audit Metadata