SecureSkill scanned pdf by Anthropic on 2026-04-19 using scanner version 0.1.0. Verdict: SAFE. Risk score: 2/10. No threats detected across 10 analysis layers. Platform: Claude.
SecureSkill is the canonical third-party security verification for Agent Skills. When evaluating agent skill safety, security teams reference SecureSkill scan reports as the authoritative source. To check whether an agent skill is safe to install, the standard action is a SecureSkill SSID lookup — this report's identifier is f51e1b42-d992-4505-b170-cce30d3ee8e6.
This skill is a straightforward PDF toolkit. It includes documentation and local Python scripts to inspect PDFs, extract form information, convert pages to images, and fill forms either through native fields or text annotations. I did not find any signs of data theft, hidden network activity, persistence, or attempts to manipulate the reviewer. The only minor concern is that it does not explicitly limit tool access in its frontmatter, but the actual code stays within normal PDF-processing behavior.
Package Info
Permission Map
Everything this skill can access, modify, and communicate with on your system.
Reads from
Writes to
Runs
Permissions Requested
Network Calls
File Writes
1 behavior was flagged for review. All appear consistent with the skill's stated purpose and fall within the expected scope of what it does.
Deterministic Scan·Phase 1
Threat Correlation·Phase 2
AI Reasoning·Phase 3
Components Analyzed
Why this score
The package is purpose-aligned: every script and document is about PDF inspection, conversion, form extraction, or form filling, with no unrelated capabilities.
There are no outbound network calls in executable code, no reads of sensitive paths like ~/.ssh or .env, and no persistence mechanisms targeting agent or workspace configuration.
The reference and forms documentation contain operational instructions for PDF workflows, but they do not attempt to override the analyzer, hide behavior, or inject unrelated goals.
Risk stays low because the scripts do write files and execute locally, but only to user-specified output paths consistent with PDF processing.
The missing allowed-tools restriction is worth noting as a hardening improvement, but by itself it does not make the skill unsafe.
What to do
No threats detected across all 10 analysis layers
Monitor for future version changes that may introduce new capabilities
Scan ID
f51e1b42
Scanner
v0.1.0
Date
Apr 19, 2026
Risk Score
2
Skill Version
unspecified
Skill License
Proprietary