nano-pdf
Warn
Audited by Socket on Oct 6, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s stated purpose is narrow local PDF page editing, but the referenced package appears to be a different, AI-enabled tool that may require Gemini credentials and make outbound API calls. While distribution via PyPI/uv is standard and not overtly malicious, the mismatch between claimed capabilities and the actual package footprint is a significant integrity problem.
Confidence: 91%Severity: 72%
Audit Metadata