ClawHub

Nutrient Openclaw 1.2.5

v1.0.0

OpenClaw-native PDF/document processing skill for Nutrient DWS. Best for OpenClaw users who need PDF conversion, OCR, text/table extraction, PII redaction, w...

⭐ 0· 71·0 current·0 all-time
by@zhouhuihui008
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name/description describe document processing (conversion, OCR, extraction, redaction, signing) and the skill requests only a Nutrient API key (via config path). That aligns with the stated purpose. One minor inconsistency: the _meta.json ownerId differs from the registry Owner ID shown in the metadata, which could indicate packaging/metadata mismatch but does not contradict the core purpose.
✓
Instruction Scope
SKILL.md explicitly instructs the agent to upload files/content to Nutrient DWS for processing and warns users to avoid sensitive documents unless acceptable. It does not instruct reading unrelated files or accessing unrelated credentials. Instructions are scoped to the documented operations.
ℹ
Install Mechanism
Install spec is an npm package (@nutrient-sdk/nutrient-openclaw). Using npm for an SDK is expected for this kind of integration, but npm packages are external code run on the agent host — verify the package and publisher before installing (check npm page, GitHub repo, and package integrity).
✓
Credentials
The skill requires a single config path for an API key (plugins.entries.nutrient-openclaw.config.apiKey). No unrelated environment variables or credentials are requested. This is proportionate to the stated functionality.
✓
Persistence & Privilege
always is false and model invocation is enabled (defaults). The skill does not request persistent platform-wide privileges or to modify other skills. Normal autonomous invocation applies; nothing indicates elevated or hidden persistence.
Assessment
This skill appears to do what it says: it installs an npm SDK and sends documents to Nutrient's hosted Processor API for conversion, OCR, extraction, redaction, watermarking, and signing. Important things to consider before installing: - Only upload documents you are comfortable sending to a third party; follow your organization's data handling policy. The SKILL.md warns about this for a reason. - Use a least-privilege API key and test with non-sensitive samples first. - Verify the npm package and GitHub repository (publisher, recent activity, stars, issues) to reduce supply-chain risk. - The package installs external code (npm) — if you need stronger assurance, review the package source or run it in an isolated environment. - Note the small metadata mismatch (ownerId differences in files); if provenance matters, confirm the publisher identity before trusting the skill in production.

Like a lobster shell, security has layers — review code before you run it.

Plugin bundle (nix)
Skill pack · CLI binary · Config
SKILL.mdCLIConfig
Config requirements
latestvk9741658jptdgbjghmfvdj5m7n83kayc

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

📄 Clawdis
Configplugins.entries.nutrient-openclaw.config.apiKey

Install

Install Nutrient OpenClaw packagenpm i -g @nutrient-sdk/nutrient-openclaw

Links

Homepagehttps://www.nutrient.io/api/
Repositoryhttps://github.com/PSPDFKit-labs/nutrient-openclaw
Docshttps://www.nutrient.io/api/documentation/security

Config example

Starter config for this plugin bundle.

plugins:
  entries:
    nutrient-openclaw:
      config:
        apiKey: "your-api-key-here"

Comments