GLM-V-Doc-Based-Writing
v1.0.1Write a textual content based on given document(s) and requirements, using ZhiPu GLM-V multimodal model. Read and comprehend one or multiple documents (PDF/D...
⭐ 0· 184·0 current·0 all-time
byJared Wen@jaredforreal
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description ask for document-based writing with a ZhiPu GLM-V model; required binary (python) and required env var (ZHIPU_API_KEY) are appropriate and necessary for calling the Zhipu API from the included Python script.
Instruction Scope
SKILL.md and the script instruct the agent to read provided documents and send them to the Zhipu API. Local PDFs are converted to page images (base64) and transmitted; remote file URLs are sent as file_url entries. This behavior is consistent with the purpose but means local document contents will be uploaded to the remote API—users should avoid sending sensitive/confidential documents.
Install Mechanism
No install spec (instruction-only plus a Python script). Optional dependency PyMuPDF is suggested for local PDF processing (pip install). There are no downloads from untrusted URLs or archive extraction steps in the bundle.
Credentials
Only a single credential (ZHIPU_API_KEY) is required and is the expected credential for this integration. SKILL.md states that this key is shared with other Zhipu skills—be aware that storing the key in a global config (openclaw.json or shell env) will permit other skills to reuse it.
Persistence & Privilege
always is false and the skill does not request system-wide changes or modify other skills' configurations. Autonomous invocation is allowed by default (normal).
Scan Findings in Context
[pre_scan:none] expected: No regex-based pre-scan findings. The script makes outbound HTTPS requests to the official bigmodel.cn API and performs base64 encoding of local PDF pages—both are expected behaviors for this skill.
Assessment
This skill will upload document contents to Zhipu's API (remote URLs or base64-encoded local PDF pages). Do not use it with confidential or sensitive documents unless you trust the remote service and your API key handling. Keep in mind: storing your ZHIPU_API_KEY in a global config or environment variable allows other Zhipu-related skills to reuse it, so manage and rotate the key if needed. If you only want local processing without network transmission, do not run this skill. Also ensure PyMuPDF is installed only if you need local PDF support, and review the output before sharing it (the skill displays the model's returned Markdown verbatim).Like a lobster shell, security has layers — review code before you run it.
latestvk97a2njdq8dg27mpqgjqra4atd83t9cp
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
✍️ Clawdis
Binspython
EnvZHIPU_API_KEY
Primary envZHIPU_API_KEY
