nano-pdf

Warn

Audited by Socket on Oct 6, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s stated purpose is narrow local PDF page editing, but the referenced package appears to be a different, AI-enabled tool that may require Gemini credentials and make outbound API calls. While distribution via PyPI/uv is standard and not overtly malicious, the mismatch between claimed capabilities and the actual package footprint is a significant integrity problem.

Confidence: 91%Severity: 72%
Audit Metadata
Analyzed At
Oct 6, 2026, 07:42 AM
Package URL
pkg:socket/skills-sh/wentorai%2Fresearch-claw%2Fnano-pdf%2F@caeeb2baea6ced5739629f9e0077eeb0954efec206b3eb88d654591285451841