文件总结 File Summary & Analysis

Local document summary tool. Activate when user mentions "总结文件", "帮我总结", "总结文档", "分析文档" or provides a local file path (txt/docx/pdf/xlsx/xls).

Security Scan

The skill's code and instructions match its stated purpose (reading local documents and returning text for summarization), but it performs runtime pip installs which have side effects and deserve caution.

Purpose & Capability

Name/description promise a local file summary tool; the code implements reading txt/docx/pdf/xlsx/xls and outputs extracted text for the agent to summarize. Required capabilities align with the stated purpose.

Instruction Scope

SKILL.md and file2sum.py limit actions to extracting the provided file path and printing its contents (errors prefixed with ❌). There are no instructions to read other files, environment variables, or to transmit data to external endpoints beyond what the platform's LLM will do with the extracted text.

Install Mechanism

There is no formal install spec; the script auto-installs Python packages at runtime via subprocess pip install (python-docx, pypdf, openpyxl, xlrd==1.2.0). Auto-installing packages from PyPI is coherent for parsing formats but is a side effect (network fetch, changes to the Python environment). The script suppresses pip output, which can hide install failures or messages.

Credentials

The skill requests no environment variables, credentials, or config paths. The only requested permission is file read access for the user-provided path and permission to execute Python—both proportional to the task.

Persistence & Privilege

always:false and no modifications to other skills or system configs. However, the script may install packages into the system/global Python environment (a persistence-like side effect) which can alter the host environment and may require network access or elevated privileges depending on the environment.

Assessment

The skill appears to do what it says: it reads the file you point it at and prints extracted text for the LLM to summarize. Before installing/use: (1) review the included file2sum.py yourself (it is small and readable); (2) avoid sending sensitive files unless you trust the environment and the agent's handling of extracted text; (3) run the tool inside a virtualenv/container or pre-install the required Python packages yourself to avoid unexpected global pip installs; (4) ensure your environment allows outbound network access (pip will fetch packages); (5) if you need higher assurance, request the author/source or host the code from a trusted repository rather than using an unknown source.

File Summary Tool

Single tool file_summary for local document text extraction and summary.

Token Extraction

From user input 帮我总结 D:\测试.pdf → file_path = D:\测试.pdf

Actions

Extract Document Content

{ "action": "extract", "file_path": "D:\测试.pdf" }

Returns:

• Success: Plain text content of the document (txt/docx/pdf/xlsx/xls)
• Error: Error message starting with ❌ (e.g. ❌ File not found, ❌ Unsupported format)

Generate Summary

{ "action": "summary", "file_path": "D:\测试.pdf" }

Returns: Concise summary of the document content (integrated with OpenClaw LLM)

Workflow

To summarize a local document:

1. Extract content: { "action": "extract", "file_path": "your_file_path" } → returns plain text
2. Generate summary: OpenClaw LLM summarizes the extracted text automatically

Configuration

channels: local: tools: file_summary: true # default: true python: true # required - need Python environment

Dependency

Required Environment

1. Python 3.8+ (added to system environment variables)
2. Required Python packages (auto-installed by script):
   • python-docx (for docx)
   • pypdf (for pdf)
   • openpyxl (for xlsx)
   • xlrd==1.2.0 (for xls)

Tool Path Configuration

1. Place the tool files in OpenClaw's skill folder: OpenClaw/skills/file-summary/ ├─ SKILL.md (this file) ├─ file2sum.py
2. Set the execution command in OpenClaw: ${skill_path}\file2sum.py

Permissions

Required:

• Local file read permission (user needs to grant file access)
• Python execute permission (no special system permissions required)

Usage

Local Deployment

1. Put the file-summary folder into OpenClaw's skills directory
2. Restart OpenClaw
3. User input example:
   • "帮我总结 D:\测试.pdf"
   • "总结文件 D:\数据\销售表.xlsx"

Public Deployment

1. Upload the file-summary folder (include md/py) to a public platform (e.g. GitHub/Gitee, ClawHub)
2. Share the download link
3. Users import via OpenClaw "Skill Market → Import from URL"