ClawHub

Paperzilla Monitor

v1.1.1

Monitor and triage Paperzilla project feeds. Use when users ask what is new, want relevance triage, need paper markdown summaries, or want a digest workflow.

⭐ 1· 73·0 current·0 all-time
byMark Pors 🦖@pors
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
ℹ
Purpose & Capability
The SKILL.md describes exactly the Paperzilla monitoring workflow (calling the `pz` CLI for feeds, rec, paper, feedback, and optionally using OpenClaw's message tool to send Telegram digests). Those capabilities align with the name/description. However, the registry summary for the skill lists no required binaries while SKILL.md metadata and instructions explicitly require the `pz` CLI—this is an inconsistency that should be corrected.
✓
Instruction Scope
Instructions are scoped to running `pz` commands, forming triage/digests, and optionally using the platform `message` tool to deliver Telegram messages. The SKILL.md does not instruct reading unrelated files, leaking environment variables, or calling external endpoints beyond the expected CLI/tooling. It also includes sensible prompts (confirm project, confirm Telegram target) and cautions (do not dump full markdown unless requested).
✓
Install Mechanism
This is an instruction-only skill with no install spec and no code files — lowest-risk install model. The SKILL.md expects the `pz` CLI to already be installed and authenticated; it suggests using `which pz` to detect absence rather than trying to install arbitrary code.
✓
Credentials
The skill declares no required environment variables or credentials. Its Telegram sending relies on the platform `message` tool (which may itself require configuration outside the skill); the SKILL.md correctly asks to confirm the destination before sending. There are no requests for unrelated secrets or broad credential access.
✓
Persistence & Privilege
The skill is not always-enabled and is user-invocable; it does not request elevated or persistent privileges, nor does it instruct modifying other skills or system-wide agent settings.
Assessment
This skill appears to do what it says: it expects the Paperzilla `pz` CLI to be present and authenticated, and can send digests via your agent's message tool. Before installing or using it, verify you have `pz` installed and have run `pz login` (the SKILL.md assumes an authenticated CLI). Also confirm how your OpenClaw `message` integration handles Telegram authentication and what chat id/permissions are needed; the skill asks you to confirm the destination before sending but cannot itself provide or obtain Telegram credentials. Finally, consider asking the publisher to correct the registry metadata to list `pz` as a required binary so the dependency is clear.

Like a lobster shell, security has layers — review code before you run it.

latestvk979j874t49r7j2wa8ffacn7ph8434yb

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments