pdf-processor

Warn

Audited by Socket on Mar 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core PDF-extraction purpose matches the capabilities, but the skill routes document processing through an `orth` intermediary and multiple external APIs with unclear trust boundaries and unspecified CLI provenance. The main risk is third-party exposure of document data and remote-content processing, not confirmed malware.

Confidence: 77%Severity: 58%
Audit Metadata
Analyzed At
Mar 29, 2026, 05:59 PM
Package URL
pkg:socket/skills-sh/orthogonal-sh%2Fskills%2Fpdf-processor%2F@cb9e9da6de53e661aea4eef9f56b4081e949dd5a