Doc Factory
v1.0.0문서 생성 후 디스코드 채널 간 양방향 링크로 전달하는 프로세스. 펭귄공장(지휘 채널)에서 문서 생성 지시가 오면 대상 채널에 문서 업로드 + 펭귄공장 링크, 펭귄공장에 완료 알림 + 대상 채널 링크를 남긴다. "문서 만들어줘", "PDF 만들어줘", "견적서 만들어줘", "리스트...
⭐ 0· 152·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The described purpose (generate documents and post them with reciprocal channel links on Discord) aligns with the instructions. However, the SKILL.md references running Google Chrome headless to produce PDFs but the skill declares no required binaries — this is a mismatch (Chrome should be listed as required). The command is macOS-specific while the skill has no OS restriction.
Instruction Scope
Instructions are narrowly scoped to: generate HTML → PDF using headless Chrome, upload the file to the target Discord channel, and post reciprocal channel mentions. They do not ask to read unrelated system files. They do assume the agent has the capability to upload to Discord and run Chrome, but they do not describe how authentication / permissions for Discord posting are obtained.
Install Mechanism
Instruction-only skill with no install steps or external downloads — minimal risk from installation. Nothing will be written to disk by an installer, though the runtime workflow will create PDF files.
Credentials
No environment variables or credentials are declared, yet the workflow requires posting to Discord channels (which normally needs a bot token or platform-level Discord integration) and a local Chrome binary. The absence of declared credentials/binaries is an operational omission; it’s not necessarily malicious but you should confirm where the Discord posting capability and Chrome runtime come from and that only required permissions are granted.
Persistence & Privilege
always is false and the skill is user-invocable with normal autonomous invocation allowed; it does not request persistent presence or attempt to modify other skills or system-wide settings.
Assessment
This skill appears to do what it says (create PDFs and post them with channel links), but before installing: 1) confirm the agent runtime has a headless Chrome available (or update the skill to declare Chrome as a required binary and provide cross-platform commands); 2) verify how the agent will authenticate to Discord (bot token or platform integration) and grant only minimal upload/post permissions to the bot; 3) check the hard-coded control channel ID (1486250338338996325) is intended and safe to use; and 4) test in a staging server or sandboxed environment to ensure it doesn't post to unintended channels. If you need higher assurance, ask the skill author to declare required binaries and authentication steps explicitly and to provide non-macOS examples.Like a lobster shell, security has layers — review code before you run it.
latestvk97dfv0jrvsh0e3y1jyc7n8wgx83kj0z
License
MIT-0
Free to use, modify, and redistribute. No attribution required.