Triage suspicious PDFs locally: actions, JavaScript, embedded files, hidden-content signals.
Best-effort, in-browser triage. Strongly obfuscated PDFs, uncommon filters, or steganography may evade detection. For high-assurance analysis, use offline tooling (qpdf, mutool, pdfid, peepdf) in a sandbox.