pdf-metadata-sanitization

Strip embedded PDF metadata and forensic traces using qpdf and ExifTool.

1|Updated Apr 18, 2026
One-click install
npx skills add https://github.com/husnainfareed/Skills --skill pdf-metadata-sanitization
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: pdf-metadata-sanitization
Source: https://github.com/husnainfareed/Skills/tree/main/pdf-metadata-sanitization
Command: npx skills add https://github.com/husnainfareed/Skills --skill pdf-metadata-sanitization

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

PDF files often contain embedded metadata such as author names, producer information, XMP streams, creation and modification dates, and incremental update tails that can leak sensitive personal or organizational information. Basic metadata removal tools often leave behind recoverable forensic traces that compromise privacy and document anonymity.

Core Features & Use Cases

  • Complete Metadata Stripping: Removes all embedded PDF metadata including Info dictionaries, XMP streams, producer/author/date fields, and residual forensic bytes left by incomplete edits from tools like ExifTool.
  • Binary Rewrite for Unrecoverable Cleanup: Rewrites the PDF's internal structure to eliminate incremental update chains and leftover strings that could be used to recover prior metadata.
  • Use Cases: Anonymize contracts or CVs before sharing with third parties, prepare sensitive internal documents for external distribution, verify no residual metadata remains after PDF editing, and understand how messaging apps like WhatsApp handle PDF metadata in transit.

Quick Start

Use the pdf-metadata-sanitization skill to fully anonymize the attached sensitive contract PDF so no author, producer, or editing metadata remains recoverable via forensic analysis.

Frequently Asked Questions about pdf-metadata-sanitization

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I remove hidden author and producer metadata from a PDF?

PDF metadata sanitization works by stripping embedded Info dictionaries and XMP streams, then rewriting the binary structure to eliminate residual forensic bytes and incremental update tails, ensuring prior metadata cannot be recovered.

Why does PDF metadata remain after using basic ExifTool cleanup?

PDF metadata often remains after basic ExifTool cleanup because incremental update chains and residual forensic bytes persist in the binary structure, requiring a full binary rewrite to prevent metadata recovery.

Does WhatsApp strip PDF metadata automatically when sharing files?

Sharing a PDF via WhatsApp does not inherently guarantee complete metadata removal, so you should independently sanitize the document to verify no author, producer, or editing metadata remains recoverable.

What is the best way to fully anonymize a sensitive contract PDF?

The best way to fully anonymize a sensitive contract PDF is to combine tag removal with a binary rewrite, eliminating XMP streams, date fields, and incremental update tails to ensure zero forensic metadata recovery.

Do I need qpdf and poppler to verify PDF metadata removal?

You need qpdf for binary rewriting and cleanup, ExifTool for tag removal, and poppler for verification to ensure complete PDF metadata sanitization and confirm no residual metadata persists.