pdf-manipulation — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited pdf-manipulation (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Merge, split, extract, redact, and transform PDF files using free command-line tools and libraries. Covers common PDF operations for document automation workflows.
# Ubuntu/Debian
sudo apt-get install pdftk qpdf poppler-utils ghostscript
# macOS (Homebrew)
brew install pdftk-java qpdf poppler ghostscript
# For Node.js: npm i pdf-lib (pure JS, no system deps)
# For Python: pip install PyPDF2 pypdf# Using pdftk (preserves bookmarks, forms)
pdftk file1.pdf file2.pdf file3.pdf cat output merged.pdf
# Using ghostscript (better compression)
gs -dBATCH -dNOPAUSE -q -sDEVICE=pdfwrite -sOutputFile=merged.pdf file1.pdf file2.pdf file3.pdf
# Using qpdf (preserves structure)
qpdf --empty --pages file1.pdf file2.pdf file3.pdf -- merged.pdfNode.js (pdf-lib):
const { PDFDocument } = require('pdf-lib');
const fs = require('fs');
async function mergePDFs(files, output) {
const mergedPdf = await PDFDocument.create();
for (const file of files) {
const pdfBytes = fs.readFileSync(file);
const pdf = await PDFDocument.load(pdfBytes);
const pages = await mergedPdf.copyPages(pdf, pdf.getPageIndices());
pages.forEach(page => mergedPdf.addPage(page));
}
const mergedBytes = await mergedPdf.save();
fs.writeFileSync(output, mergedBytes);
}
// mergePDFs(['file1.pdf', 'file2.pdf'], 'merged.pdf');# Split every page into separate files
pdftk input.pdf burst output page_%02d.pdf
# Extract specific pages (e.g., pages 1-5 and 10)
pdftk input.pdf cat 1-5 10 output subset.pdf
# Extract page ranges with qpdf
qpdf input.pdf --pages . 1-5 -- output.pdf
# Split every N pages (e.g., every 2 pages)
pdftk input.pdf burst
# then manually combine or script itNode.js (pdf-lib):
const { PDFDocument } = require('pdf-lib');
const fs = require('fs');
async function extractPages(inputPath, pages, outputPath) {
const pdfBytes = fs.readFileSync(inputPath);
const pdfDoc = await PDFDocument.load(pdfBytes);
const newPdf = await PDFDocument.create();
for (const pageNum of pages) {
const [page] = await newPdf.copyPages(pdfDoc, [pageNum - 1]);
newPdf.addPage(page);
}
const newBytes = await newPdf.save();
fs.writeFileSync(outputPath, newBytes);
}
// extractPages('input.pdf', [1, 3, 5], 'output.pdf');# Extract all text (preserves layout)
pdftotext input.pdf output.txt
# Extract text as raw (no layout)
pdftotext -raw input.pdf output.txt
# Extract specific pages
pdftotext -f 1 -l 5 input.pdf output.txt
# Using qpdf + pdftotext
pdftotext -layout input.pdf -Node.js (pdf-parse):
const fs = require('fs');
const pdf = require('pdf-parse');
async function extractText(filePath) {
const dataBuffer = fs.readFileSync(filePath);
const data = await pdf(dataBuffer);
return data.text;
}
// extractText('input.pdf').then(console.log);# Extract all images from PDF
pdfimages -all input.pdf output_prefix
# Output: output_prefix-000.png, output_prefix-001.jpg, etc.
# Extract only JPEGs
pdfimages -j input.pdf output_prefix# Remove specific pages (e.g., remove pages 2-4)
pdftk input.pdf cat 1 5-end output redacted.pdf
# Keep only specific pages
pdftk input.pdf cat 1-10 20-30 output selected.pdf# Encrypt PDF with password
pdftk input.pdf output secured.pdf user_pw mypassword
# Remove password
pdftk secured.pdf input_pw mypassword output unlocked.pdf
# Using qpdf (AES-256)
qpdf --encrypt userpass ownerpass 256 -- input.pdf output.pdfNode.js (pdf-lib):
const { PDFDocument } = require('pdf-lib');
const fs = require('fs');
async function encryptPDF(inputPath, password, outputPath) {
const pdfBytes = fs.readFileSync(inputPath);
const pdfDoc = await PDFDocument.load(pdfBytes);
const encryptedBytes = await pdfDoc.save({
userPassword: password,
ownerPassword: password
});
fs.writeFileSync(outputPath, encryptedBytes);
}# Rotate all pages 90 degrees clockwise
pdftk input.pdf cat 1-endright output rotated.pdf
# Rotate specific pages
pdftk input.pdf cat 1-5 6right 7-end output rotated.pdf
# Options: right (90°), left (270°), down (180°)# Using ghostscript (adjust quality)
gs -sDEVICE=pdfwrite -dCompatibilityLevel=1.4 -dPDFSETTINGS=/ebook \
-dNOPAUSE -dQUIET -dBATCH -sOutputFile=compressed.pdf input.pdf
# Quality settings:
# /screen - low quality (72 dpi)
# /ebook - medium (150 dpi)
# /printer - high (300 dpi)
# /prepress - highest (300 dpi, preserves color)
# Using qpdf (lossless compression)
qpdf --linearize --object-streams=generate input.pdf compressed.pdf# Convert each page to PNG (300 DPI)
pdftoppm -png -r 300 input.pdf output_prefix
# Output: output_prefix-1.png, output_prefix-2.png, etc.
# Convert to JPEG
pdftoppm -jpeg -r 150 input.pdf output_prefix
# Using ImageMagick (alternative)
convert -density 300 input.pdf output_%03d.png# Overlay watermark.pdf on every page
pdftk input.pdf stamp watermark.pdf output watermarked.pdf
# Background watermark (behind content)
pdftk input.pdf background watermark.pdf output watermarked.pdf
# Watermark specific pages only
pdftk input.pdf multistamp watermark.pdf output watermarked.pdf# Using pdftk
pdftk input.pdf dump_data
# Using qpdf
qpdf --show-object=1 input.pdf
# Using pdfinfo (poppler-utils)
pdfinfo input.pdfconst { PDFDocument } = require('pdf-lib');
const fs = require('fs');
class PDFHelper {
static async merge(files, output) {
const merged = await PDFDocument.create();
for (const file of files) {
const pdf = await PDFDocument.load(fs.readFileSync(file));
const pages = await merged.copyPages(pdf, pdf.getPageIndices());
pages.forEach(p => merged.addPage(p));
}
fs.writeFileSync(output, await merged.save());
}
static async split(input, ranges, output) {
const pdf = await PDFDocument.load(fs.readFileSync(input));
const newPdf = await PDFDocument.create();
const pages = await newPdf.copyPages(pdf, ranges);
pages.forEach(p => newPdf.addPage(p));
fs.writeFileSync(output, await newPdf.save());
}
static async info(input) {
const pdf = await PDFDocument.load(fs.readFileSync(input));
return {
pages: pdf.getPageCount(),
title: pdf.getTitle(),
author: pdf.getAuthor(),
creator: pdf.getCreator()
};
}
}
module.exports = PDFHelper;You have PDF manipulation skills. When a user requests PDF operations:
1. Detect the operation: merge, split, extract (text/images/pages), redact, compress, encrypt, rotate, watermark, or get info.
2. Use appropriate tools:
- pdftk for merge, split, rotate, encrypt, watermark
- pdftotext/pdfimages for extraction
- ghostscript for compression
- qpdf for repair and advanced operations
3. Always validate input files exist before processing.
4. For scripting, prefer pdf-lib (Node.js) or PyPDF2 (Python) for portability.
5. Return structured output (file paths, metadata, text) in JSON format.qpdf --check input.pdf)./ebook is a good balance for most cases.# 1. Extract text for parsing
pdftotext invoice.pdf invoice.txt
# 2. Extract first page only (summary)
pdftk invoice.pdf cat 1 output summary.pdf
# 3. Compress for archival
gs -sDEVICE=pdfwrite -dPDFSETTINGS=/ebook -dBATCH -dNOPAUSE -q \
-sOutputFile=invoice_compressed.pdf invoice.pdf# Merge all PDFs in a directory
pdftk *.pdf cat output combined.pdf
# Split each PDF in directory into individual pages
for f in *.pdf; do
pdftk "$f" burst output "${f%.pdf}_page_%02d.pdf"
done
# Extract text from all PDFs
for f in *.pdf; do
pdftotext "$f" "${f%.pdf}.txt"
doneqpdf --check then qpdf input.pdf --replace-input to repair.qpdf --decrypt --password=PASS input.pdf output.pdf.fonts-liberation or msttcorefonts packages.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.