Use this skill whenever the user wants to do anything with PDF files. This includes reading or extracting text/tables from PDFs, combining or merging multiple PDFs into one, splitting PDFs apart, rotating pages, adding watermarks, creating new PDFs, filling PDF forms, encrypting/decrypting PDFs, extracting images, and OCR on scanned PDFs to make them searchable. If the user mentions a .pdf file or asks to produce one, use this skill.
○ declared by the publisher, as-is
Safety
BB: 4 or more lows, or any medium2 severity-bearing · 22 informational
Safety · gateassessed 8w ago
B2 severity-bearing · 22 informational
Graded from 2 severity-bearing findings on this release.
A gate; it passes or fails, never weighed against price or quality.
Reliability & Quality
n/anot assessed
Reliability & Qualityassessed 8w ago
n/anot assessed
Not assessed; no producer has emitted into this category. An absence, not a zero.
Findings with severity, graded on the same letter scale as safety.
not assessed
Cost
n/anot assessed
Costassessed 8w ago
n/anot assessed
Not assessed; no producer has emitted into this category. An absence, not a zero.
Declared external service dependencies. Never a monetary figure.
not assessed
Popularity
n/anot assessed
Popularity · not a figureassessed 8w ago
n/anot assessed
Not assessed; no producer has emitted into this category. An absence, not a zero.
Context read off the linked repository. It enters no ranking and no grade.
◌ Vettd does not install assets; this record describes a copy you obtain yourself.
Custody chainSource ↗○ linked, not verified by Vettd
anthropics◐→anthropics/skills○→version = △ no commit pinned→sha256:6369…9238◐→signature △ not assessed|Proprietary. LICENSE.txt has complete terms○record c92b06ec-8cc4-4441-b50f-afb5d50b742a · live
◌ public recordYou are signed out, so you see the record and nothing else. sign in
▲Skill name collides with well-known skillflagged"pdf" matches a well-known skill name — may cause unintended invocationvettd · scan · 8wMedium
▲Description overclaims scopeflaggedBroad trigger words (anything, everything, all files, etc.) widen attack surface — narrow to specific use casesvettd · scan · 8wLow
▲Examples includedflaggedFound code blocks, input/output samples, or an examples section — concrete samples help agents pattern-match effectivelyvettd · scan · 8wInfo
▲SKILL.md body length is reasonableflagged309 lines (recommended: under 500)vettd · scan · 8wInfo
▲CLI help supportedflaggedscripts/check_bounding_boxes.py: Script documents its interface via --help or argument parsingvettd · scan · 8wInfo
▲CLI help supportedflaggedscripts/extract_form_field_info.py: Script documents its interface via --help or argument parsingvettd · scan · 8wInfo
▲CLI help supportedflaggedscripts/fill_fillable_fields.py: Script documents its interface via --help or argument parsingvettd · scan · 8wInfo
▲Progressive disclosure usedflaggedSKILL.md body references files in references/, scripts/, or assets/ — agents can load additional context on demand instead of consuming everything upfrontvettd · scan · 8wInfo
▲No evaluation test casesflaggedAdd an evals/ directory with test prompts and expected outputs to measure skill qualityvettd · scan · 8wInfo
▲No repository linkflaggedNo repository field found in SKILL.md frontmatter. Skills without a verifiable source repository cannot be externally audited.vettd · scan · 8wInfo
▲No secrets or unsafe code patterns detectedflaggedScanned all files for credentials, private keys, and code-level risks (eval, shell exec, destructive ops)vettd · scan · 8wInfo
▲No prompt injection or jailbreak signals detectedflaggedScanned text content for instruction override, jailbreak framing, credential solicitation, and embedded injection markersvettd · scan · 8wInfo
▲Description within character limitflagged437/1024 characters usedvettd · scan · 8wInfo
▲Description includes usage contextflaggedGood: description explains when to activate the skillvettd · scan · 8wInfo
▲CLI help supportedflaggedscripts/convert_pdf_to_images.py: Script documents its interface via --help or argument parsingvettd · scan · 8wInfo
▲CLI help supportedflaggedscripts/create_validation_image.py: Script documents its interface via --help or argument parsingvettd · scan · 8wInfo
▲No external URLs in skill definitionflaggedSKILL.md and references/ files do not reference external URLsvettd · scan · 8wInfo
▲CLI help supportedflaggedscripts/check_fillable_fields.py: Script documents its interface via --help or argument parsingvettd · scan · 8wInfo
▲No clear workflow structureflaggedConsider adding numbered steps or a structured procedure for the agent to followvettd · scan · 8wInfo
▲CLI help supportedflaggedscripts/fill_pdf_form_with_annotations.py: Script documents its interface via --help or argument parsingvettd · scan · 8wInfo
Not assessed; no producer has emitted into reliability & quality for this asset. That is different from a check that ran and found nothing, which the record would carry as a row of its own.
+Performance◌ not assessednot assessed0 signalsrecord c92b06ec-8cc4-4441-b50f-afb5d50b742a
how it was establishednot assessed; no producer has emitted into this category
Not assessed; no producer has emitted into performance for this asset. That is different from a check that ran and found nothing, which the record would carry as a row of its own.
+Cost◌ not assessednot assessed0 signalsrecord c92b06ec-8cc4-4441-b50f-afb5d50b742a
how it was establishednot assessed; no producer has emitted into this category
Not assessed; no producer has emitted into cost for this asset. That is different from a check that ran and found nothing, which the record would carry as a row of its own.
+Compatibility◌ not assessednot assessed0 signalsrecord c92b06ec-8cc4-4441-b50f-afb5d50b742a
how it was establishednot assessed; no producer has emitted into this category
Not assessed; no producer has emitted into compatibility for this asset. That is different from a check that ran and found nothing, which the record would carry as a row of its own.
+Popularity◌ not assessednot assessed0 signalsrecord c92b06ec-8cc4-4441-b50f-afb5d50b742a
how it was establishednot assessed; no producer has emitted into this category
Not assessed; no producer has emitted into popularity for this asset. That is different from a check that ran and found nothing, which the record would carry as a row of its own.
+Characteristics◌ not assessednot assessed0 signalsrecord c92b06ec-8cc4-4441-b50f-afb5d50b742a
how it was establishednot assessed; no producer has emitted into this category
Not assessed; no producer has emitted into characteristics for this asset. That is different from a check that ran and found nothing, which the record would carry as a row of its own.
pdf assessed 8w ago /
24 signals · 1 category
Safety
▲Skill name collides with well-known skillMedium
▲Description overclaims scopeLow
▲Examples includedInfo
▲scripts/ directory presentInfo
▲SKILL.md body length is reasonableInfo
▲CLI help supportedInfo
▲CLI help supportedInfo
▲CLI help supportedInfo
▲Progressive disclosure usedInfo
▲Valid name fieldInfo
▲No evaluation test casesInfo
▲No repository linkInfo
▲No secrets or unsafe code patterns detectedInfo
▲No prompt injection or jailbreak signals detectedInfo
▲Description within character limitInfo
▲Description includes usage contextInfo
▲CLI help supportedInfo
▲CLI help supportedInfo
▲No external URLs in skill definitionInfo
▲CLI help supportedInfo
▲No clear workflow structureInfo
▲CLI help supportedInfo
▲SKILL.md presentInfo
▲CLI help supportedInfo
‹ › or arrow keys move through 24
Coverage1 of 7 categories assessed · shown
Safety
✓ assessed
assessed as findings and a letter grade, not as signals
Reliability & Quality
△ not assessed
no producer has emitted for this category
Performance
△ not assessed
no producer has emitted for this category
Cost
△ not assessed
no producer has emitted for this category
Compatibility
△ not assessed
no producer has emitted for this category
Popularity
△ not assessed
no producer has emitted for this category
Characteristics
△ not assessed
no producer has emitted for this category
Freshness & re-evaluation
assessed8w ago · Cisco AI Defense · Vettd core○ unverified
source stateThis source hasn't been verified recently.Staleness unknown
re-check policycheck failing; retried on an increasing backoffnext check in 2h
re-run whena new release ships, the upstream source changes, or the scanner ruleset is revisedauto-scheduled
Limitations & open conflicts
limitationReliability & Quality, Performance, Cost, Compatibility, Popularity, Characteristics are not assessed: behaviour there is unmeasured, not clean△ gap
conflictno two sources report the same quantity on this record
Verify: does this record describe your copy?
What record c92b06ec-8cc4-4441-b50f-afb5d50b742a covers
scannerv9△ superseded by v11
validityassessed 8w ago · Staleness unknown
$vettd scan folder <path>
this record was taken at digest sha256:6369f4649de6… compare it against the digest your own scan prints
Reproduce: re-run the evidence yourself
$vettd scan folder /path/to/your/copy
runs the same scanners against your own copy; the published record is never overwritten
How this record comparesagainst other published records · full comparison →
Signal kinds
▲ finding: something to act on, carries a severity● measurement: a reproducible quantityƒ estimate: inferred from a sample▪ fact: read directly off the artifact◆ classification: assigned from a taxonomy◌ nothing found: a producer looked and emitted no object◇ context only: described, never graded
Custody marks
◐ computed by vettd○ declared by the publisher, as-is△ not assessed: nothing looked
Weigh pdf against other published skills: the safety grade, its finding counts and each category’s verdict, one row apiece. The full comparison page carries every signal and framework coverage.