{"id":"92e152523b25","status":"done","kind":"auto","source":"github","target":"https://github.com/anthropics/skills/tree/main/skills/pdf","name":"pdf","version":"","verdict":"NO MALICIOUS BEHAVIOR OBSERVED","top_finding":null,"findings":0,"critical":0,"public":true,"confidence":null,"created_at":"2026-10-25T12:14:17.198923Z","finished_at":"2026-10-25T12:14:29.547773Z","report_url":"https://detonationlabs.com/r/92e152523b25","progress":[{"phase":"scripts","label":"baseline","status":"ok","duration":0.4,"new":[],"findings":[],"note":""},{"phase":"scripts","label":"ci-github","status":"ok","duration":0.4,"new":[],"findings":[],"note":""},{"phase":"scripts","label":"cloud-creds","status":"ok","duration":0.4,"new":[],"findings":[],"note":""},{"phase":"scripts","label":"baseline","status":"ok","duration":0.4,"new":[],"findings":[],"note":""},{"phase":"scripts","label":"guided:PYTHON_COLORS","status":"ok","duration":0.4,"new":[],"findings":[],"note":""},{"phase":"scripts","label":"ci-github","status":"ok","duration":0.4,"new":[],"findings":[],"note":""},{"phase":"scripts","label":"baseline","status":"ok","duration":0.4,"new":[],"findings":[],"note":""},{"phase":"scripts","label":"guided:PYTHON_COLORS","status":"ok","duration":0.4,"new":[],"findings":[],"note":""}],"error":null,"report":{"engine":"detonator 0.5.1","generated":"2026-10-25T12:14:29Z","target":{"name":"pdf","sha256":"69e2ac9eb2bbe2881df26acc53b46b39a15cfda206f5357e5f9c83feb0fadcc7","files":12,"scripts":["scripts/check_bounding_boxes.py","scripts/check_fillable_fields.py","scripts/convert_pdf_to_images.py","scripts/create_validation_image.py","scripts/extract_form_field_info.py","scripts/extract_form_structure.py","scripts/fill_fillable_fields.py","scripts/fill_pdf_form_with_annotations.py"],"declared":{},"trigger_hints":[],"kind":"skill"},"verdict":"NO MALICIOUS BEHAVIOR OBSERVED","observed":{"network":[],"files_written":[],"secrets_read":[],"commands":[],"exfiltration":[]},"findings":[],"exploration":{"runs":[{"phase":"scripts","target":"scripts/check_bounding_boxes.py","label":"baseline","status":"ok","duration":0.389,"new_signatures":[],"findings":0,"note":"","commands":[],"agent_reply":""},{"phase":"scripts","target":"scripts/check_bounding_boxes.py","label":"ci-github","status":"ok","duration":0.394,"new_signatures":[],"findings":0,"note":"","commands":[],"agent_reply":""},{"phase":"scripts","target":"scripts/check_bounding_boxes.py","label":"cloud-creds","status":"ok","duration":0.392,"new_signatures":[],"findings":0,"note":"","commands":[],"agent_reply":""},{"phase":"scripts","target":"scripts/check_fillable_fields.py","label":"baseline","status":"ok","duration":0.407,"new_signatures":[],"findings":0,"note":"","commands":[],"agent_reply":""},{"phase":"scripts","target":"scripts/check_fillable_fields.py","label":"guided:PYTHON_COLORS","status":"ok","duration":0.397,"new_signatures":[],"findings":0,"note":"","commands":[],"agent_reply":""},{"phase":"scripts","target":"scripts/check_fillable_fields.py","label":"ci-github","status":"ok","duration":0.404,"new_signatures":[],"findings":0,"note":"","commands":[],"agent_reply":""},{"phase":"scripts","target":"scripts/convert_pdf_to_images.py","label":"baseline","status":"ok","duration":0.402,"new_signatures":[],"findings":0,"note":"","commands":[],"agent_reply":""},{"phase":"scripts","target":"scripts/convert_pdf_to_images.py","label":"guided:PYTHON_COLORS","status":"ok","duration":0.414,"new_signatures":[],"findings":0,"note":"","commands":[],"agent_reply":""}],"stopped":"scripts/scripts/check_bounding_boxes.py: coverage plateau (2 runs with no new behavior); scripts/scripts/check_fillable_fields.py: coverage plateau (2 runs with no new behavior); scripts/scripts/convert_pdf_to_images.py: run budget spent; llm: run budget spent","model_usage":{"prompt_tokens":0,"completion_tokens":0,"llm_runs":0}},"note":"Observed behavior only. A clean result does not prove a package is safe.","summary":"Nothing malicious or suspicious happened in 8 runs.","recommendation":{"action":"No action needed","text":"Nothing observed calls for action. This is evidence, not a guarantee."},"iocs":{"hosts":[],"ips":[],"sha256":"69e2ac9eb2bbe2881df26acc53b46b39a15cfda206f5357e5f9c83feb0fadcc7","benign_hosts":[]},"coverage":{"runs":8,"phases":["scripts"],"environments":["baseline","ci-github","cloud-creds","guided:PYTHON_COLORS"],"tool_calls":0,"model_runs":0,"stopped":"scripts/scripts/check_bounding_boxes.py: coverage plateau (2 runs with no new behavior); scripts/scripts/check_fillable_fields.py: coverage plateau (2 runs with no new behavior); scripts/scripts/convert_pdf_to_images.py: run budget spent; llm: run budget spent"},"tree":{},"confidence":""}}