lovstudio-pdf2png
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill leverages the macOS-native CoreGraphics and AppKit frameworks via the PyObjC bridge to perform PDF rendering. This approach is more secure and efficient than using external binaries like ImageMagick or Ghostscript.- [COMMAND_EXECUTION]: The skill executes a local bash script (
pdf2png.sh) which in turn executes a Python script to process user-provided PDF files. The script is well-contained, uses absolute paths for the interpreter, and properly quotes variables to prevent shell injection.- [EXTERNAL_DOWNLOADS]: The skill requires thepyobjc-framework-QuartzPython package. This is a standard library for macOS automation and is installed from the official Python Package Index (PyPI).- [SAFE]: No network operations, data exfiltration attempts, or credential harvesting patterns were found. The code is transparent and lacks any form of obfuscation.
Audit Metadata