Universal Extractor
v1.0.0Extract clean text from URLs, articles, documents, and files. Four extraction micro-services. Use when you need to pull content from web pages, PDFs, or any...
0· 43·0 当前·0 累计
by 安全扫描
OpenClaw
可疑
medium confidenceThe skill's stated purpose (extract text from URLs/files) matches its instructions at a high level, but the runtime instructions are ambiguous about where requests are sent and how payments are handled, and they instruct sending potentially sensitive file contents off-device — this mismatch and potential for data exfiltration and unexpected charges is concerning.
评估建议
Do not send sensitive documents or secrets to this skill until the following are clarified: (1) what is the full API host/URL to which POST requests will be sent (domain, TLS expectations), (2) how are payments actually performed (does the agent need a wallet/private key or will billing be handled outside the agent?), (3) who operates the service and what is their privacy policy/retention rules, and (4) whether data is stored or logged by the service. If you still want to try it, test with non-s...详细分析 ▾
⚠ 用途与能力
Name/description (text extraction) aligns with the provided endpoints (clean-url, extract-article, extract-document, extract-file). However the SKILL.md omits the host/URL root for the POST endpoints (it only gives paths like /x402s/clean-url) and also references a paid 'x402' protocol without declaring any credentials or wallet requirements — this is inconsistent with a self-contained extractor skill and suggests missing integration details.
⚠ 指令范围
Instructions explicitly tell the agent to POST base64-encoded files and URLs to external endpoints, which would transmit arbitrary user content (including sensitive data). There is no guidance on which hostname to use, how to authenticate, or how to handle clearance/consent. The instructions grant the agent broad discretion to send user content to an unspecified external service.
✓ 安装机制
No install spec and no code files — instruction-only skill. This minimizes on-disk risk because nothing will be written or executed by an installer, which is appropriate for a simple API-invoking skill.
⚠ 凭证需求
The SKILL.md claims 'No API keys needed' but indicates requests are paid in USDC via an 'x402' protocol on Base — this implies a wallet/transaction signing mechanism or external payment flow that is not declared. The skill requests sending content but declares no credentials; the absence of any declared credential or payment mechanism is disproportionate to the stated paid API behavior and is an unresolved inconsistency.
✓ 持久化与权限
The skill does not request always-on presence and uses normal agent invocation rules. It does not declare changes to other skills or system-wide settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/11
- Initial release of universal-extractor. - Extract clean text from URLs, articles, and a wide range of files. - Four services: clean URL text, article extraction with summary, document to text, and universal file extraction. - Easy API endpoints; payments handled via x402 protocol using USDC.
● 无害
安装命令 点击复制
官方npx clawhub@latest install universal-extractor
镜像加速npx clawhub@latest install universal-extractor --registry https://cn.clawhub-mirror.com
技能文档
Four extraction services — URL to text, article to summary, document to JSON.
Services
/clean-url — URL to Clean Text
Strip ads, nav, footers. Get the content.POST /x402s/clean-url
Body: {"url": "https://example.com/article"}
Response: {"text": "...", "title": "...", "author": "...", "word_count": 1234}
Price: $0.001 USDC
/extract-article — Article + Summary
Full article extraction with optional LLM summary.POST /x402s/extract-article
Body: {"url": "https://...", "summarize": true}
Response: {"title": "...", "text": "...", "summary": "...", "author": "...", "date": "..."}
Price: $0.005 USDC
/extract-document — Document to Text
Base64-encoded PDF/DOCX/TXT to structured text.POST /x402s/extract-document
Body: {"content": "", "filename": "report.pdf"}
Response: {"text": "...", "word_count": 5678}
Price: $0.002 USDC
/extract-file — Any File to Text
Universal file-to-text extraction.POST /x402s/extract-file
Body: {"content": "", "filename": "data.csv"}
Response: {"text": "...", "word_count": 234}
Price: $0.002 USDC
Payment
x402 protocol — USDC on Base. No API keys needed.数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制