Skills/npm/pdf-reader-mcp

pdf-reader-mcp@8.5.5

CAUTION

Publisher claims: "pdf-reader-mcp is now @sylphx/anymd. Any file → clean Markdown for AI agents. Compatibility alias that runs anymd as `pdf-reader-mcp`." Observed in sandbox: static analysis only — behavior not yet observed.

Registry npm (MCP server)Publisher sylphx · joined 0 days agoInstalls 26,424Last detonated 1 h ago

Dispute verdict

Behavior trace

Queued for honeypot run · static analysis only

t+CategoryObserved action

This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.

Static findings

HIGH

npx invocation of non-well-known packageREADME.md:14 · npx invocation of non-well-known package — may execute untrusted code

AST06

No other findings across 81 lines in 4 files.