Nudocs
v1.2.0Upload, edit, and export documents via Nudocs.ai. Use when creating shareable document links for collaborative editing, uploading markdown/docs to Nudocs for rich editing, or pulling back edited content. Triggers on "send to nudocs", "upload to nudocs", "edit in nudocs", "pull from nudocs", "get the nudocs link", "show my nudocs documents".
⭐ 1· 2k·2 current·4 all-time
byJonathan Rhyne@jdrhyne
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (upload/edit/export via Nudocs.ai) match the declared dependencies: a 'nudocs' CLI binary, an NUDOCS_API_KEY environment variable, and a Nudocs config file path. The npm package cited (@nutrient-sdk/nudocs-cli) and GitHub repo correspond to the CLI.
Instruction Scope
SKILL.md instructs only CLI actions (upload, list, link, pull, delete, config) and how to supply an API key. It does not ask for unrelated files, system credentials, or hidden network endpoints; it only reads/writes the expected document files and the configured Nudocs API key.
Install Mechanism
Installation uses a public npm package (@nutrient-sdk/nudocs-cli) which is a reasonable delivery for a CLI. npm packages can run install-time scripts, so verify the package source/maintainer and prefer installing from a reviewed publisher or pinned version. The provided GitHub repo points to PSPDFKit/nudocs-cli, which aligns with the package metadata.
Credentials
The single required secret (NUDOCS_API_KEY) and a single user config file (~/.config/nudocs/api_key) are proportional to a service-integration skill. No unrelated credentials or broad system secrets are requested.
Persistence & Privilege
The skill does not request 'always: true' or any elevated persistent presence. It installs a CLI binary (nudocs) into the environment when the npm package is installed, which is expected for a CLI-based integration and does not modify other skills or system-wide agent settings.
Assessment
This skill looks internally consistent, but take these practical precautions before installing: 1) Verify the npm package and GitHub repo (publisher, recent commits, issues) match the official Nudocs/PSPDFKit sources and pin a specific version. 2) Treat NUDOCS_API_KEY like any API secret—provide the minimum-privilege key, store it in your secrets manager, and rotate if needed. 3) Remember global npm installs can run arbitrary code at install time—review package install scripts if you will run npm install -g. 4) Consider installing and testing the CLI in an isolated environment (container or VM) first. 5) The agent can invoke this skill autonomously (platform default); if you want to limit that, control agent invocation settings in your platform rather than relying on the skill. If you need higher assurance, ask the skill author for a checksum or signed release or review the CLI source before installing.Like a lobster shell, security has layers — review code before you run it.
latestvk97dyjsa0kd3h61zdzcgybhz79813250
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📄 Clawdis
Binsnudocs
EnvNUDOCS_API_KEY
Config~/.config/nudocs/api_key
Install
Install Nudocs CLI (npm)
Bins: nudocs
npm i -g @nutrient-sdk/nudocs-cli