Paper2diagram
v1.0.2论文 PDF → 方法/结构抽取 → 学术评审式总结 → 多张论文风格配图（依托 Gemini + nano_banana 网关）。
⭐ 1· 57·1 current·1 all-time
by@qbc-oio
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description match what the skill requests: it needs a Gemini API key and a Banana/nano_banana key to call LLM/image gateways and python3 to run a local workflow. Those credentials are proportional to producing summaries and images.
Instruction Scope
SKILL.md instructs the agent to read a local PDF and run a local Python module (python -m app.openclaw_main ...). That stays within the stated purpose, but the skill is instruction-only and expects you to clone a separate repo containing app.openclaw_main; without that repo the command will fail. The doc also suggests sending the PDF to the configured gateway(s) — you must trust those gateways before uploading sensitive PDFs.
Install Mechanism
No install spec (instruction-only) — nothing will be written by the skill itself. The README instructs you to clone an external repository and install dependencies locally; that is an explicit user action rather than an automated install.
Credentials
Declared required env vars are GEMINI_API_KEY and BANANA_PRO_API_KEY, which align with the stated integrations. SKILL.md additionally documents several optional env vars (GEMINI_BASE_URL, GEMINI_MODEL, BANANA_PRO_BASE_URL, BANANA_MODEL, ENABLE_BANANA) that are not listed in requires.env — a mild inconsistency. No unrelated credentials or config paths are requested.
Persistence & Privilege
always is false and the skill does not request persistent system-wide privileges. It does instruct running local Python code and writing images to an outputs/ directory, which is expected and limited to its own scope.
Assessment
This skill is an instruction-only wrapper that expects you to host or clone the actual workflow repository and to supply Gemini and Banana API keys. Before using it: (1) inspect and clone the referenced repo locally and review its code; (2) run it in an isolated environment (virtualenv/container); (3) only point GEMINI_BASE_URL / BANANA_PRO_BASE_URL to gateways you control or trust — the skill will send PDFs to whatever gateway you configure; (4) prefer local outputs/ copies of generated images rather than relying only on external temporary URLs; (5) limit API key permissions and rotate keys if you test with sensitive data. The skill appears coherent with its purpose, but you should verify the external repo and gateway behavior before running on confidential PDFs.Like a lobster shell, security has layers — review code before you run it.
latestvk975n1dzw4442fs8ztpzn1qm0984fksq
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🧠 Clawdis
Binspython3
EnvGEMINI_API_KEY, BANANA_PRO_API_KEY
Primary envGEMINI_API_KEY