pdf-online

SUSPICIOUS: the Feishu integration is largely coherent and uses an official CLI, but the skill's core document-processing path depends on an insufficiently verified SoMark parser/service that receives raw user documents, and it performs staged remote writes plus external image fetching. The footprint mostly matches the stated purpose, yet the unverifiable parser provenance and outbound document flow keep risk above benign.