LiteParse
v1.0.0Parse, extract text from, and screenshot PDF and document files locally using the LiteParse CLI (`lit`). Use when asked to extract text from a PDF, parse a W...
⭐ 0· 167·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description claim a local CLI-based document parser and the SKILL.md consistently describes using the `lit` CLI (npm package @llamaindex/liteparse) to parse PDFs, Office files, images and produce text/JSON/screenshots. Requiring LibreOffice/ImageMagick for some file types is reasonable. Small inconsistency: SKILL.md and references alternate between “LiteParse” and “LlamaParse/LlamaIndex” branding, and the registry metadata lacks a homepage—this is a minor provenance concern but not a functional mismatch.
Instruction Scope
Instructions focus on running the `lit` CLI against user-supplied documents (parse, batch-parse, screenshot). They do not instruct reading unrelated system files or exfiltrating data. The SKILL.md claims "Runs entirely offline — no cloud, no API key," but also documents that Tesseract.js will download ~10MB of language data on first run and that installation uses npm/brew; those steps require network access on first-run/install even though runtime parsing is local afterwards.
Install Mechanism
No install spec is embedded in the skill bundle (instruction-only). SKILL.md instructs installing via npm (`npm install -g @llamaindex/liteparse`) or a brew tap. NPM and brew are common but npm global installs can run postinstall scripts and fetch remote artifacts (Tesseract data). There are no direct downloads from obscure URLs in the instructions.
Credentials
The skill declares no required environment variables, credentials, or config paths. The runtime instructions only reference optional external tools (LibreOffice, ImageMagick) and local files provided by the user—this is proportionate to the stated purpose.
Persistence & Privilege
The skill is not forced-always, does not request persistent privileges, and does not propose modifying other skills or global agent settings. It is user-invocable and can be run autonomously by the agent (platform default) which is expected for skills.
Assessment
This skill appears to do what it says: run a local CLI to extract text/screenshots from documents. Before installing: (1) confirm the npm package identity and publisher (search the npm registry and repository) because the registry metadata here lacks a homepage; (2) be aware that the first install/run will fetch packages and Tesseract language data over the network (so it’s not strictly offline until that completes); (3) npm global installs may run install scripts—review the package contents or run in a sandbox/container if you’re unsure; (4) installing LibreOffice/ImageMagick via brew is optional but required for some file types and may require macOS-specific tooling; (5) if provenance is important, ask the publisher for the source repo or checksum and verify the package before global installation. Overall the skill is coherent with its purpose but verify the package origin and consider running in an isolated environment if you have security concerns.Like a lobster shell, security has layers — review code before you run it.
latestvk97cshpj5gtb3czrvp67rf1xnn83b63n
License
MIT-0
Free to use, modify, and redistribute. No attribution required.