Doc Processor
v2.7.13智能文档生成引擎 - 样式感知 + 三层模板 + 动态分类 支持 Word/Excel/PDF/CSV/TXT 读取、写入、转换、合并、提取、模板填充 v2.7: 性能监控 + 用户文档 + 错误增强 v2.6: Excel 格式保持 + PDF 生成 v2.5: 批量处理 + 模板缓存 v2.4: 日志系统 +...
⭐ 0· 323·2 current·2 all-time
byfuyabing6803@mo-yuhua
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description (Word/Excel/PDF processing, template filling, batch processing) matches the files and APIs present (doc_processor.py, excel_style.py, pdf_generator, scripts). The declared system binaries (pdftotext, pdfinfo) are appropriate for PDF reading. Required Python dependencies (python-docx, openpyxl, pandas) align with the stated features.
Instruction Scope
SKILL.md instructs only local operations (reading/writing/converting/merging files) and to run setup.sh / scripts under the skill workspace. The codebase refers to a workspace path (~/.openclaw/workspace/ and user-templates) and to optional environment variables for logging (DOC_PROCESSOR_LOG_LEVEL, DOC_PROCESSOR_LOG_FILE) that are not listed as required in the manifest — this is benign but worth noting. No obvious instructions to read unrelated system files or to transmit data externally appear in the provided snippets; earlier AI/networking modules were explicitly removed in recent versions.
Install Mechanism
There is no remote one-step binary download in the manifest; installation is via a local setup.sh that runs pip install -r requirements.txt and the metadata suggests using system package managers for poppler. pip installs from PyPI (or user-specified mirrors) are the only network activity implied. This is standard for Python projects but carries the usual supply-chain risk; the install script should be inspected before running.
Credentials
The skill declares no required credentials or config paths. It does use/observe optional env vars for logging (DOC_PROCESSOR_LOG_LEVEL, DOC_PROCESSOR_LOG_FILE) and the SKILL.md shows examples of providing a PIP_INDEX_URL when running setup.sh. These environment usages are reasonable for configuration; they are not secret credentials and do not appear to be used for exfiltration. Still, DOC_PROCESSOR_LOG_FILE allows writing logs to a path under user control — verify that the path is safe.
Persistence & Privilege
The skill is not flagged always:true and is user-invocable only. It stores user templates within the skill's workspace (~/.openclaw/workspace/user-templates/) which is consistent with its purpose. There is no indication it modifies other skills or global agent configuration.
Assessment
This package appears to be a locally focused document-processing tool and is internally coherent with its description. Before installing: (1) open and inspect setup.sh (it will run pip and any commands on your machine); (2) run check_deps.py to verify expected system tools (pdftotext/pdfinfo) and Python modules; (3) install inside a virtualenv to limit scope; (4) verify the logging env vars (DOC_PROCESSOR_LOG_FILE) won't write logs to sensitive locations; (5) if you want to be extra cautious, review any omitted files (setup.sh and remaining code not shown in the truncated dump) to confirm there are no unexpected network calls or shell invocations. If you need the old AI features, note they were removed in v2.7.11 and are expected to be provided by the OpenClaw host instead.Like a lobster shell, security has layers — review code before you run it.
latestvk97dje7hak4c6ptj95w18mgjsn83r25a
License
MIT-0
Free to use, modify, and redistribute. No attribution required.