pdf-compress-tool

Compress PDF files to a target size or by percentage, using a Ghostscript + pikepdf + QPDF multi-stage pipeline.

This skill appears to do what it says: compress PDFs using pikepdf/Ghostscript/qpdf. Before installing or running it: (1) review the included compress_pdf.py (you already have it) to verify behavior — the script is local and readable; (2) be aware the script will try to run pip install pikepdf at runtime, which fetches a package from PyPI — if you prefer, preinstall pikepdf in a controlled virtualenv or system environment instead of letting the script auto-install; (3) run the tool on non-sensitive/test PDFs first to confirm results; (4) ensure Ghostscript and qpdf are installed from trusted package sources when needed; and (5) if you require stronger isolation, execute the script in a sandbox/container or VM so runtime dependency installation cannot affect your host environment.

Type: OpenClaw Skill Name: pdf-compress-tool Version: 1.0.2 The pdf-compress-tool is a legitimate utility designed to compress PDF files using a multi-stage pipeline involving pikepdf, Ghostscript, and QPDF. While the script performs high-privilege actions such as executing external binaries via subprocess.run and auto-installing the 'pikepdf' library via pip, these behaviors are transparently documented and directly support the tool's stated purpose. There is no evidence of data exfiltration, unauthorized network access, persistence mechanisms, or malicious prompt injection in the SKILL.md or compress_pdf.py files.