Nutrient Openclaw

OpenClaw-native PDF/document processing skill for Nutrient DWS. Best for OpenClaw users who need PDF conversion, OCR, text/table extraction, PII redaction, w...

Security Scan

The skill's requirements and instructions are consistent with a third-party document-processing SDK that sends files to the Nutrient DWS and requires an API key; nothing in the SKILL.md requests unrelated credentials or system access.

Purpose & Capability

Name, description, and runtime instructions all describe PDF/document processing (OCR, conversion, redaction, signing). The declared required config path (plugins.entries.nutrient-openclaw.config.apiKey) matches the described need for an API key to call Nutrient's hosted Processor API.

Instruction Scope

SKILL.md instructs the agent to send documents to Nutrient DWS for processing, to install the npm package inside OpenClaw, and to configure an API key. It does not instruct reading unrelated files, environment variables, or system secrets, nor does it direct data to endpoints other than the stated Nutrient API.

Install Mechanism

Install is via an npm package (@nutrient-sdk/nutrient-openclaw). This is proportionate for a JS/Node SDK but carries the usual supply-chain/third-party package risks: the package will be fetched and run, so users should verify package provenance, review its code or repository, and confirm the package is from a trusted maintainer before installing in production.

Credentials

No unrelated environment variables or host credentials are requested. The single required configuration is an API key (declared as a plugin config path), which is appropriate for a hosted document-processing service. The SKILL.md also advises using a least-privilege API key and testing with non-sensitive files.

Persistence & Privilege

Skill is not marked always:true and uses normal autonomous invocation defaults. It does not request system-wide configuration or permissions beyond its own plugin config entry.

Assessment

This skill appears coherent for a third-party document-processing SDK — it will send files to Nutrient's hosted Processor API and requires an API key configured in the plugin entry. Before installing: (1) confirm your organization permits sending documents (especially sensitive ones) to an external service; (2) obtain a least-privilege API key and test with non-sensitive samples; (3) inspect the npm package and linked GitHub repository to confirm provenance and review what the SDK does locally (network calls, telemetry); (4) monitor and rotate the API key and watch usage/credits. The primary remaining risk is the npm package itself (supply-chain risk), not the SKILL.md instructions.

Nutrient Document Processing (OpenClaw Native)

Best for OpenClaw users. Process documents directly in OpenClaw conversations — PDF conversion, text/table extraction, OCR, PII redaction, digital signatures, and watermarking via native nutrient_* tools.

Installation

Preferred install flow inside OpenClaw:

openclaw plugins install @nutrient-sdk/nutrient-openclaw

Configure your API key:

plugins:
  entries:
    nutrient-openclaw:
      config:
        apiKey: "your-api-key-here"

Get an API key at nutrient.io/api

Data Handling

• nutrient_* operations send the file or extracted document content to Nutrient DWS for processing.
• Review Nutrient's Processor API security and privacy details before using production or sensitive documents.
• Nutrient documents its hosted Processor API as using HTTPS for data in transit and as not persistently storing input or output files after processing; confirm that matches your organization's requirements before uploading sensitive material.
• Start with non-sensitive sample files and a least-privilege API key.

Available Tools

Tool	Description
nutrient_convert_to_pdf	Convert DOCX, XLSX, PPTX, HTML, or images to PDF
nutrient_convert_to_image	Render PDF pages as PNG, JPEG, or WebP
nutrient_convert_to_office	Convert PDF to DOCX, XLSX, or PPTX
nutrient_extract_text	Extract text, tables, or key-value pairs
nutrient_ocr	Apply OCR to scanned PDFs or images
nutrient_watermark	Add text or image watermarks
nutrient_redact	Redact via patterns (SSN, email, phone)
nutrient_ai_redact	AI-powered PII detection and redaction
nutrient_sign	Digitally sign PDF documents
nutrient_check_credits	Check API credit balance and usage

Example Prompts

Convert: "Convert this Word doc to PDF"

Extract: "Extract all text from this scanned receipt" / "Pull tables from this PDF"

Redact: "Redact all PII from this document" / "Remove email addresses and phone numbers"

Watermark: "Add a CONFIDENTIAL watermark to this PDF"

Sign: "Sign this contract as Jonathan Rhyne"

Links

• npm package
• GitHub
• Nutrient API