Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

KDP Publisher DE

v1.0.0

KDP Publisher DE konvertiert Markdown-Kapitel in professionell formatierte, KDP-fähige PDFs im OpenClaw-Buchstil mit QR-Codes.

0· 79·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for tikitackr/kdp-publisher-de.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "KDP Publisher DE" (tikitackr/kdp-publisher-de) from ClawHub.
Skill page: https://clawhub.ai/tikitackr/kdp-publisher-de
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install kdp-publisher-de

ClawHub CLI

Package manager switcher

npx clawhub@latest install kdp-publisher-de
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The code and README align with the stated purpose: md2typ converts Markdown to Typst, build/compile orchestrate assembly and call an external Typst compile API to produce PDFs with QR codes. However there are surprising hard-coded local paths (e.g., KAPITEL_DIR and LINKS_JSON point to ~/Desktop/openclaw-projekt/...) that are not mentioned in SKILL.md or _meta.json and will cause the skill to read files from the user's home/desktop area. The skill's meta declares network access (network: true) which is proportionate to using a remote compile service, but the presence of those filesystem defaults is unexpected for a generic

Like a lobster shell, security has layers — review code before you run it.

amazonvk97f6fn4vr9zwv67mkxjjw1m4h85c5bcbuchvk97f6fn4vr9zwv67mkxjjw1m4h85c5bcdeutschvk97f6fn4vr9zwv67mkxjjw1m4h85c5bckdpvk97f6fn4vr9zwv67mkxjjw1m4h85c5bclatestvk97f6fn4vr9zwv67mkxjjw1m4h85c5bcmarkdownvk97f6fn4vr9zwv67mkxjjw1m4h85c5bcpdfvk97f6fn4vr9zwv67mkxjjw1m4h85c5bcpublishingvk97f6fn4vr9zwv67mkxjjw1m4h85c5bcstablevk97f6fn4vr9zwv67mkxjjw1m4h85c5bctypstvk97f6fn4vr9zwv67mkxjjw1m4h85c5bc
79downloads
0stars
1versions
Updated 5d ago
v1.0.0
MIT-0

kdp-publisher — KDP PDF Builder

Dieser Skill wandelt Markdown-Kapitel in KDP-fertige PDFs um — im Buchstil von "OpenClaw – Agentic Authorship".

Voraussetzungen prüfen

# Python-Abhängigkeiten installieren (einmalig):
pip install requests qrcode

# Skill-Verzeichnis:
ls $OPENCLAW_WORKSPACE/skills/kdp-publisher/scripts/

Verwendung

Ein Kapitel:

cd $OPENCLAW_WORKSPACE/skills/kdp-publisher/scripts
python3 build-book.py --chapter /pfad/zu/kapitel.md /pfad/output/kapitel.pdf

Ganzes Buch (alle Kapitel in der konfigurierten Reihenfolge):

cd $OPENCLAW_WORKSPACE/skills/kdp-publisher/scripts
python3 build-book.py /pfad/output/buch.pdf

Was passiert im Hintergrund

  1. build-book.py orchestriert den Build
  2. md2typ.py konvertiert Markdown → Typst
  3. compile.py generiert QR-Codes + sendet an TypeTex API → PDF

Markdown-Format

ElementSyntax
Kapitelüberschrift# Titel
Abschnitt## Titel
Tipp-Box> **TIPP:** Text
Warn-Box> **WARNUNG:** Text
Hinweis-Box> **HINWEIS:** Text
Erfolg-Box> **ERFOLG:** Text
Zitat> Text
QR-Code[QR-CODE: ID – Label]
QR mit Hinweis[QR-CODE: ID – Label | Hinweistext]

QR-Codes konfigurieren

QR-Code-URLs werden aus einer links.json geladen. Standardpfad:

$OPENCLAW_WORKSPACE/links.json

Format:

{
  "eigene_projekte": { "DASHBOARD_URL": "https://deine-domain.de" },
  "qr_codes": {
    "MEIN-QR": {
      "target": "{{DASHBOARD_URL}}/seite",
      "print_url": "deine-domain.de/seite"
    }
  }
}

Häufige Probleme

  • QR nicht gefunden: ID in links.json prüfen, kein _-Präfix
  • API-Timeout: Kapitel einzeln kompilieren statt ganzes Buch
  • Font fehlt: TypeTex API stellt Inter und Liberation Mono bereit — kein lokales Install nötig

Comments

Loading comments...