I used Didier Stevens's pdfid.py to check a pdf, and it found js and automatic actions associated with the pdf:
How do I check if this is malicious code?
Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.Sign up to join this community
The only way to check if said code is malicious is to scan it with anti-malware solutions/products. The usual way would be to also use sandboxes/dynamic analysis and see that the code does.
Obviously, in many cases, you cannot do that kind of analyses locally (i.e., using an installed product), but have to check it online with multi-scanning products. In that case, by uploading the whole document, confidentiality is not preserved, as the file is uploaded publicly.
You could try isolating the executable code (using some tool) and then uploading the code online for analyses (e.g., VirusTotal, which has uses sandboxes, too).