Nutrient Openclaw 1.2.5

OpenClaw-native PDF/document processing skill for Nutrient DWS. Best for OpenClaw users who need PDF conversion, OCR, text/table extraction, PII redaction, w...

Security Scan

The skill's declared purpose (PDF/document processing) matches what it asks for and instructs: it requires an API key and installs an npm SDK to send files to Nutrient's hosted Processor API — use only when third‑party processing is acceptable.

Purpose & Capability

Name/description describe document processing (conversion, OCR, extraction, redaction, signing) and the skill requests only a Nutrient API key (via config path). That aligns with the stated purpose. One minor inconsistency: the _meta.json ownerId differs from the registry Owner ID shown in the metadata, which could indicate packaging/metadata mismatch but does not contradict the core purpose.

Instruction Scope

SKILL.md explicitly instructs the agent to upload files/content to Nutrient DWS for processing and warns users to avoid sensitive documents unless acceptable. It does not instruct reading unrelated files or accessing unrelated credentials. Instructions are scoped to the documented operations.

Install Mechanism

Install spec is an npm package (@nutrient-sdk/nutrient-openclaw). Using npm for an SDK is expected for this kind of integration, but npm packages are external code run on the agent host — verify the package and publisher before installing (check npm page, GitHub repo, and package integrity).

Credentials

The skill requires a single config path for an API key (plugins.entries.nutrient-openclaw.config.apiKey). No unrelated environment variables or credentials are requested. This is proportionate to the stated functionality.

Persistence & Privilege

always is false and model invocation is enabled (defaults). The skill does not request persistent platform-wide privileges or to modify other skills. Normal autonomous invocation applies; nothing indicates elevated or hidden persistence.

Assessment

This skill appears to do what it says: it installs an npm SDK and sends documents to Nutrient's hosted Processor API for conversion, OCR, extraction, redaction, watermarking, and signing. Important things to consider before installing: - Only upload documents you are comfortable sending to a third party; follow your organization's data handling policy. The SKILL.md warns about this for a reason. - Use a least-privilege API key and test with non-sensitive samples first. - Verify the npm package and GitHub repository (publisher, recent activity, stars, issues) to reduce supply-chain risk. - The package installs external code (npm) — if you need stronger assurance, review the package source or run it in an isolated environment. - Note the small metadata mismatch (ownerId differences in files); if provenance matters, confirm the publisher identity before trusting the skill in production.

Nutrient Document Processing (OpenClaw Native)

Best for OpenClaw users. Process documents directly in OpenClaw conversations — PDF conversion, text/table extraction, OCR, PII redaction, digital signatures, and watermarking via native nutrient_* tools.

Installation

Preferred install flow inside OpenClaw:

openclaw plugins install @nutrient-sdk/nutrient-openclaw

Configure your API key:

plugins:
  entries:
    nutrient-openclaw:
      config:
        apiKey: "your-api-key-here"

Get an API key at nutrient.io/api

Data Handling

• nutrient_* operations send the file or extracted document content to Nutrient DWS for processing.
• Review Nutrient's Processor API security and privacy details before using production or sensitive documents.
• Nutrient documents its hosted Processor API as using HTTPS for data in transit and as not persistently storing input or output files after processing; confirm that matches your organization's requirements before uploading sensitive material.
• Start with non-sensitive sample files and a least-privilege API key.

Available Tools

Tool	Description
nutrient_convert_to_pdf	Convert DOCX, XLSX, PPTX, HTML, or images to PDF
nutrient_convert_to_image	Render PDF pages as PNG, JPEG, or WebP
nutrient_convert_to_office	Convert PDF to DOCX, XLSX, or PPTX
nutrient_extract_text	Extract text, tables, or key-value pairs
nutrient_ocr	Apply OCR to scanned PDFs or images
nutrient_watermark	Add text or image watermarks
nutrient_redact	Redact via patterns (SSN, email, phone)
nutrient_ai_redact	AI-powered PII detection and redaction
nutrient_sign	Digitally sign PDF documents
nutrient_check_credits	Check API credit balance and usage

Example Prompts

Convert: "Convert this Word doc to PDF"

Extract: "Extract all text from this scanned receipt" / "Pull tables from this PDF"

Redact: "Redact all PII from this document" / "Remove email addresses and phone numbers"

Watermark: "Add a CONFIDENTIAL watermark to this PDF"

Sign: "Sign this contract as Jonathan Rhyne"

Links

• npm package
• GitHub
• Nutrient API