Skill PDF Orgnizer
v1.0.0Organizes PDFs by extracting metadata and classifying into topics, renaming files, and sorting into topic-based folders using AI analysis.
⭐ 0· 93·0 current·0 all-time
byYiming Liu@yxl184
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (organize PDFs using AI) match the code and runtime needs: reading PDFs, calling an LLM API to extract metadata and classify topics, creating folders, and moving/renaming files. The skill requires an API key (stored in config.json) which is appropriate for the stated OpenAI/Kimi integration.
Instruction Scope
The SKILL.md and code are consistent: the skill reads PDF content (up to max_chars) and sends it to OpenAI or the Kimi endpoint for analysis. This is expected for an AI classification tool, but it does transmit potentially sensitive document content to external APIs (OpenAI or https://api.moonshot.cn for Kimi). The skill also creates cache files (.folder_cache.json, .processed_files.json) and will move/rename original PDFs (unless dry_run=true).
Install Mechanism
No install script in the registry entry (instruction-only), but the bundle includes requirements.txt and setup.py. Dependencies are standard (PyPDF2, openai, python-dotenv). There is no remote download of arbitrary code or use of obscure URLs; installing requires running pip install -r requirements.txt (low risk).
Credentials
The only credential required is an API key (openai_api_key) stored in config.json, which matches the use of OpenAI/Kimi APIs. No unrelated environment variables, system credentials, or platform tokens are requested. python-dotenv is listed but not used—minor mismatch but not a credential risk in itself.
Persistence & Privilege
The skill does not request always:true, does not alter other skills, and only writes application-scoped files (cache and processed logs) plus move/rename operations in user folders. These behaviors are expected for a file-organization tool; moving files is destructive if misconfigured, so dry-run and backups are important.
Assessment
This skill appears to do what it says: it reads PDFs locally, sends excerpts to OpenAI or the Kimi API for analysis, then creates folders and moves/renames files. Before running: (1) Be aware that document content (up to the configured max_chars) will be transmitted to a third‑party API—do not use on sensitive or confidential PDFs unless you accept that exposure. (2) The API key is stored in config.json; keep that file secure and do not commit it to version control. (3) Run in dry_run mode first to preview changes and ensure naming/foldering meets your expectations. (4) Back up your PDFs (or run on a copy) before allowing actual moves. (5) Note the Kimi provider uses https://api.moonshot.cn as the base URL—confirm you trust that provider if you choose it. If you want additional assurance, you can audit the code locally (it’s included) and run the tool in a sandbox or with a small sample set first.Like a lobster shell, security has layers — review code before you run it.
latestvk970zckk760xcepz104hqwh54n833bmq
License
MIT-0
Free to use, modify, and redistribute. No attribution required.