PDF Extract Text

• Risk level: Low
• Analyzed: Apr 18, 2026, 3:24 AM
• Findings: 0
• Version: 1.0.1
• Hash: cb37d87140d7631ee92a35e5a9f4605a42fa37099a4103b4709d25a0e1b649da

Overview

The skill is internally coherent: it implements an OpenClaw plugin that calls PDFAPIHub endpoints and requires an API key; nothing in the code or instructions indicates unrelated or disproportionate access.

This plugin uploads files to a third-party service (pdfapihub.com) and requires your PDFAPIHUB_API_KEY in plugin config or env. Before installing: (1) confirm you trust PDFAPIHub and review their privacy/retention policy (SKILL.md claims files are auto-deleted after 30 days — you may want to verify); (2) avoid sending highly sensitive documents unless you accept third‑party processing; (3) store the API key only in the plugin config or a restricted env var, not in shared configs; (4) consider rotating the key after testing and use least-privilege/project-scoped keys if available; (5) note the repository metadata mismatch (the registry summary omitted required env vars) — verify the plugin source and origin if you need higher assurance.