Process, convert, edit, and extract data from PDF files using the ComPDF Cloud API. Supports format conversion (Word, Excel, Image), page manipulation (merge...
Security Analysis
high confidenceThe skill's instructions, required artifacts, and behavior are consistent with a PDF-processing wrapper for the ComPDF Cloud API; it asks for an API key and explicit user consent before uploading files and has no hidden installs or unrelated credential requests.
The name/description (PDF conversion, OCR, page edits) matches the runtime instructions which call ComPDF endpoints, select executeTypeUrl values, and pass parameters. The skill does not request unrelated binaries, cloud credentials, or other services.
Instructions are narrowly scoped to collecting an API key (optionally saving it to config/public_key.txt), asking explicit consent, selecting the correct base URL, building parameters, uploading files as multipart form-data, and handling responses. The only noteworthy point is that file uploads go to external servers — the skill requires explicit user confirmation before doing so (the SKILL.md correctly prompts for consent and cites the privacy policy).
This is an instruction-only skill with no install spec and no code files to execute. Nothing is downloaded or written by the installer; runtime writes are limited to an optional local key file if the user explicitly agrees.
No environment variables, binaries, or unrelated credentials are requested. The only persistent artifact is an optional local file (config/public_key.txt) used to store the ComPDF API key; the SKILL.md documents its creation and how to delete it.
always is false and autonomous model invocation is allowed (platform default). The skill may write the user's ComPDF API key to config/public_key.txt only after explicit opt-in. This persistent storage is reasonable for convenience but users should be aware they must delete the file to revoke local storage.
Guidance
This skill appears to do what it claims: it uploads user files to ComPDF Cloud for processing and optionally stores a user-provided API key in config/public_key.txt. Before installing or using it: (1) do not upload highly sensitive or confidential files unless you're comfortable with the ComPDF privacy policy and external processing; (2) when prompted for the API key, prefer session-only use unless you want local convenience — delete config/public_key.txt to revoke persistent storage; (3) verify you choose the correct regional base URL (api-server.compdf.com vs api-server.compdf.cn) for legal/data-residency needs; and (4) avoid saving the key if others have access to your environment. No other unrelated credentials or installs are requested.
Latest Release
v1.0.0
- Initial release of markdown-converter-compdf skill. - Process, convert, edit, and extract data from PDF files via the ComPDF Cloud API. - Supports PDF conversions (to Word, Excel, Image, Markdown), page manipulation, watermarking, compression, OCR, AI extraction, and more. - Requires explicit user confirmation before uploading files to external servers. - User can provide and optionally save a ComPDF API key for processing. - Includes detailed workflow steps for secure, controlled API interaction and clear output formats.
Popular Skills
Published by @compdf-youna on ClawHub
