pdf-look-scanned

SUSPICIOUS. The install footprint is mostly coherent for PDF/image processing, but the skill’s primary purpose is document falsification: making files look scanned, replacing digital signatures with handwritten ones, and removing traces. Supply-chain risk is moderate due to unpinned dependencies and an unverifiable Windows Poppler repo reference; overall concern is driven more by the skill’s fraud-enabling use case than by overt malware behavior.