lovstudio-pdf2png

Pass

Audited by Gen Agent Trust Hub on May 7, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill leverages the macOS-native CoreGraphics and AppKit frameworks via the PyObjC bridge to perform PDF rendering. This approach is more secure and efficient than using external binaries like ImageMagick or Ghostscript.- [COMMAND_EXECUTION]: The skill executes a local bash script (pdf2png.sh) which in turn executes a Python script to process user-provided PDF files. The script is well-contained, uses absolute paths for the interpreter, and properly quotes variables to prevent shell injection.- [EXTERNAL_DOWNLOADS]: The skill requires the pyobjc-framework-Quartz Python package. This is a standard library for macOS automation and is installed from the official Python Package Index (PyPI).- [SAFE]: No network operations, data exfiltration attempts, or credential harvesting patterns were found. The code is transparent and lacks any form of obfuscation.
Audit Metadata
Risk Level
SAFE
Analyzed
May 7, 2026, 09:43 AM