Question 1

Does this tool upload my PDF?

Accepted Answer

No. The inspection runs entirely in your browser. Your file is never sent to a server.

Question 2

Is a "clean" verdict the same as safe?

Accepted Answer

No. A clean verdict means we didn't find JavaScript, embedded files, submit forms, or external links — but a sophisticated attacker can still hide a payload. Treat this as a quick first-pass filter, not a guarantee.

Question 3

What does JavaScript in a PDF actually do?

Accepted Answer

JavaScript actions can run automatically when you open a PDF. They can launch URLs, submit form data to remote servers, or in older readers, execute system commands. Legitimate PDFs almost never use JavaScript — invoices, contracts, and reports don't need it.

Question 4

What are embedded files?

Accepted Answer

PDFs can carry attachments in their /EmbeddedFiles tree. Many viewers let you 'open' the attachment, which can launch malware. Don't extract attachments unless you trust the source.

Question 5

What about a PDF that says it is encrypted?

Accepted Answer

Encrypted PDFs require credentials before we can inspect them. We surface that as 'Encrypted — we can't inspect it' rather than guessing.

Is this PDF safe to open?