pdf

A set of instructions for creating, restyling, inspecting, and visually checking PDF documents. PDF is a document format designed to preserve a page's layout when it is shared or printed.

In plain words
What is it for?
Use it to produce reports, briefs, handouts, or other finished PDF files, and to review or improve existing PDFs.
Why use it?
It helps catch layout problems that are not obvious from the source content or from a PDF that merely opens successfully.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/vironnimo/vbot/pdf
Any agent
npx skills add Vironnimo/vbot --skill pdf
Clone the repo
git clone --depth 1 https://github.com/Vironnimo/vbot

Made for: Claude Code, Codex.

Per session 62 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,212 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00062 $0.01212
Opus 5 $0.00031 $0.00606
Sonnet 5 $0.00012 $0.00242
Haiku 4.5 $0.00006 $0.00121

Measured yesterday against content hash ec7107b884be, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

pdf scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

The scan reads SKILL.md. This mod also ships 3 executable files (scripts/create_pdf.py, scripts/inspect_pdf.py, scripts/render_pdf.py), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

resources/skills/pdf/SKILL.md · 83 lines

How it starts

The opening of the file, as written. The whole thing — 83 lines — stays where its author put it; the contents beside it link to each section on GitHub.

PDF

Produce a finished document, not merely a file that opens. The quality loop is mandatory: generate, inspect structurally, render every page, inspect the rendered pages with vision, revise, and repeat.

Tools and paths

  • Use vBot's write or edit Tool for source/spec files, bash for the bundled scripts, and read for every rendered PNG page.
  • Resolve {baseDir} to this Skill's absolute directory when invoking bundled scripts.
  • Keep intermediates under tmp/pdfs/<task-name>/ in the effective cwd.
  • Keep final documents under output/pdf/ in the effective cwd unless the user requested another location.
  • Preserve every source PDF. Write edits to a new descriptive filename.
  • Never install packages or system binaries without the user's permission.

Dependency probe

Before creating a new PDF, run:

python -c "import reportlab; print('reportlab ready')"

Before rendering, run the bundled renderer with --help, then render normally. It accepts either the pdftoppm binary or the pypdfium2 Python package. If creation or rendering dependencies are missing, name the missing dependency and ask before installing anything. Do not silently switch to an unverified text-only result.

Creation workflow

  1. Establish the document goal, audience, page size, language, visual tone, required content, and any brand assets. Infer ordinary choices from context instead of running a long intake interview.
  2. For reports, briefs, memos, handouts, and other conventional documents, write a UTF-8 JSON specification and run python {baseDir}/scripts/create_pdf.py <spec.json> <output.pdf>. The supported block types are paragraph, heading, bullets, table, callout, image, spacer, and page_break.
  3. For a genuinely custom layout that the JSON builder cannot express, write a task-local ReportLab builder under the task's intermediate directory. Keep the same inspection and rendering loop.
  4. Use a restrained hierarchy: one dominant title, clear section headings, readable body text, consistent spacing, and one accent color. Prefer whitespace over decoration.
  5. Use a discovered TrueType font when the content contains non-ASCII text. The bundled builder searches common Windows, Linux, and macOS font locations and accepts explicit --font-regular and --font-bold paths.
  6. Make tables wrap text, repeat header rows, and split across pages. Never force a whole long section or table onto one page.
  7. Keep citations, labels, legends, footers, and page numbers human-readable. Never leave placeholders, Tool tokens, debug text, or raw markup in the document.

Read the full file on GitHub · 83 lines

Files

What ships with it

3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 83 lines · 62 tokens per session scan A ec7107b884be

Subscribe to this mod's changes

pdf is a skill published in the GitHub repository Vironnimo/vbot (1 stars, last pushed 2d ago), licensed Apache-2.0. It adds 62 tokens to every session and 1,212 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

gpt-researcher

GPT Researcher is an autonomous deep research agent that conducts web and local research, producing detailed reports with citations. Use this skill when helping developers understand, extend, debug, or integrate with GPT Researcher - including adding features, understanding the architecture, working with the API…

assafelovic/gpt-researcher · 79 tokens

review-pr

Review a Dograh pull request, branch diff, or pasted patch for repo-specific security and correctness risks that are not obvious from generic FastAPI, Next.js, or Python conventions. Use when the user asks to review a PR, audit a diff, check whether changes are safe to merge, review their own changes, or asks what to…

dograh-hq/dograh · 109 tokens

gpt-researcher

Autonomous deep research from Codex via MCP.

assafelovic/gpt-researcher · 15 tokens

review-agents-md

Audit Dograh AGENTS.md files for drift against the live repo and for bad scope boundaries between parent and child docs. Use when the user asks to review existing AGENTS files, identify stale guidance, decide whether a subtree needs its own AGENTS.md, or update the AGENTS.md hierarchy under the repo root, api/, or ui/.

dograh-hq/dograh · 82 tokens

merge-pipecat-upstream

Merge the latest upstream pipecat-ai/pipecat tag into the pipecat submodule fork (dograh-hq/pipecat) and bump the dograh repo to it. Use whenever the user asks to bump, upgrade, sync, or merge pipecat, resolve pipecat merge conflicts, audit whether upstream changes break or supersede Dograh's in-fork patches, or…

dograh-hq/dograh · 102 tokens

memmachine-memory

Use when an agent or model needs durable project, user, or session context from MemMachine, needs to save information to MemMachine memory, has requests involving mem-cli, memmachine, or memmachineclient, has insufficient conversation context, or is tempted to search local files for prior context that should come from…

MemMachine/MemMachine · 96 tokens