A PDF is not just a page. It can run script the moment it opens, carry actions that fire when you click into a field, submit what you type to an address of the sender's choosing, hide fields you never see, and attach other files inside itself. FORMAUDIT reads the file in your browser, unpacks the compressed sections where most of that actually lives, and tells you what is in there.
Drop a PDF here, or click to choose one
Nothing is uploaded and nothing in the file is opened or run.
FORMAUDIT reports what it finds; it does not remove anything. If you need a PDF with the active content genuinely gone, SEAL rebuilds each page from a bitmap, which leaves no script, no fields and no attachments because it leaves no document structure at all. Everything here is a description of what the file contains, not a judgement about intent: plenty of legitimate forms use JavaScript for validation and plenty of legitimate documents carry links. Equally, finding nothing is not a clean bill of health. This reads structure, not behaviour: it cannot tell you what a piece of script would actually do, it does not execute anything, and it does not follow a single link. Encrypted PDFs will hide most of their contents from it. Nothing is uploaded.
Questions people ask
Can a PDF contain a virus or run code?
A PDF can carry JavaScript and actions that fire when the document opens or when you click into a field, and it can carry other files embedded inside it. Whether any of that reaches something harmful depends on the reader, and modern readers sandbox it heavily, but the active content is genuinely in the file, and most of it lives inside compressed sections where a quick look at the raw bytes would miss it.
Can a PDF form send what I type somewhere?
Yes. A submit action can post the field values to an address chosen by whoever built the form, and that address does not have to have anything to do with the letterhead. Filling in a form and pressing submit inside the reader is not the same as emailing it back to the sender.
What are hidden form fields in a PDF for?
Usually something innocent: a calculated total, a version marker, a value the template needs to work. They are worth knowing about because a hidden field can be pre-filled with something you never saw and is submitted along with everything you typed.