Upstage Document Parse
PassAudited by ClawScan on May 6, 2026.
Overview
This is a coherent instruction-only Upstage document parsing integration, but it requires an Upstage API key and sends selected documents to Upstage for processing.
This skill appears safe to install if you intend to use Upstage Document Parse. Before using it, set UPSTAGE_API_KEY deliberately, understand that submitted documents are processed by Upstage, and avoid sending confidential files unless Upstage's terms and retention behavior are acceptable for your use case.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A user may not realize from the registry metadata that the skill needs an Upstage API key before it can work.
The skill documentation requires UPSTAGE_API_KEY, so the registry credential/setup contract is incomplete even though the credential use is purpose-aligned.
Required env vars: none; Env var declarations: none; Primary credential: none
Configure UPSTAGE_API_KEY only when you intend to use Upstage, and the publisher should declare this credential in the skill metadata.
Using the skill may consume Upstage quota or billing and may allow access to document-parse request functions available to that key.
The skill uses a provider API credential to call Upstage. This is expected for the service, but it gives the agent access to that API account for document parsing requests.
**API Key**: Always use `os.environ["UPSTAGE_API_KEY"]`.
Use a dedicated or least-privilege Upstage key if available, keep it in the environment rather than hardcoding it, and monitor provider usage.
Sensitive or confidential documents submitted through the skill leave the local machine and may remain available in Upstage async results for up to 30 days.
Documents are uploaded to an external provider endpoint for processing, and async results are retained by the provider for a documented period.
curl -X POST "https://api.upstage.ai/v1/document-digitization/async" ... -F "document=@large.pdf" ... Results stored for 30 days
Only submit documents you are comfortable processing with Upstage, review Upstage's data handling terms, and avoid sharing download URLs.