ClawHub

Markdown convert

v1.0.0

Process, convert, edit, and extract data from PDF files using the ComPDF Cloud API. Supports format conversion (Word, Excel, Image), page manipulation (merge...

⭐ 1· 88·0 current·0 all-time
byComPDF@youna12345
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name/description (PDF conversion, OCR, page edits) matches the runtime instructions which call ComPDF endpoints, select executeTypeUrl values, and pass parameters. The skill does not request unrelated binaries, cloud credentials, or other services.
ℹ
Instruction Scope
Instructions are narrowly scoped to collecting an API key (optionally saving it to config/public_key.txt), asking explicit consent, selecting the correct base URL, building parameters, uploading files as multipart form-data, and handling responses. The only noteworthy point is that file uploads go to external servers — the skill requires explicit user confirmation before doing so (the SKILL.md correctly prompts for consent and cites the privacy policy).
✓
Install Mechanism
This is an instruction-only skill with no install spec and no code files to execute. Nothing is downloaded or written by the installer; runtime writes are limited to an optional local key file if the user explicitly agrees.
✓
Credentials
No environment variables, binaries, or unrelated credentials are requested. The only persistent artifact is an optional local file (config/public_key.txt) used to store the ComPDF API key; the SKILL.md documents its creation and how to delete it.
ℹ
Persistence & Privilege
always is false and autonomous model invocation is allowed (platform default). The skill may write the user's ComPDF API key to config/public_key.txt only after explicit opt-in. This persistent storage is reasonable for convenience but users should be aware they must delete the file to revoke local storage.
Assessment
This skill appears to do what it claims: it uploads user files to ComPDF Cloud for processing and optionally stores a user-provided API key in config/public_key.txt. Before installing or using it: (1) do not upload highly sensitive or confidential files unless you're comfortable with the ComPDF privacy policy and external processing; (2) when prompted for the API key, prefer session-only use unless you want local convenience — delete config/public_key.txt to revoke persistent storage; (3) verify you choose the correct regional base URL (api-server.compdf.com vs api-server.compdf.cn) for legal/data-residency needs; and (4) avoid saving the key if others have access to your environment. No other unrelated credentials or installs are requested.

Like a lobster shell, security has layers — review code before you run it.

latestvk979c03hatqxtysk230wbgzras839ah4

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments