📦 document-reader — 文档阅读
v1.0.0支持 PDF、DOCX、XLSX、PPTX、RTF、ODT 及 ZIP/TAR.GZ/RAR/7Z 压缩包内文档的通用读取工具，一键提取文本与元数据，无需额外安装 Office 或解压软件。
0· 201·0 当前·0 累计
by 下载技能包
最后更新
2026/4/8
安全扫描
OpenClaw
安全
high confidenceThe skill's code, instructions, and requested dependencies are consistent with a local document/ archive reader; it does not request credentials or network access and appears to do what it claims.
评估建议
This skill is coherent for reading local documents and archives, but take these precautions before installing/running: 1) Install the documented system packages (apt-get) and Python packages in an isolated environment (venv/container) and be aware apt-get requires root. 2) Avoid running against untrusted archives on multi-user systems because the script writes predictable temp files in /tmp (use a sandbox or modify the script to use tempfile to prevent symlink/race issues). 3) textract and some ...详细分析 ▾
✓ 用途与能力
Name and description (reading many document formats and archives) match the included script and declared dependencies (textract, python-docx, openpyxl, python-pptx, rarfile, py7zr, plus system tools like poppler-utils). No extraneous credentials, binaries, or unrelated capabilities are requested.
ℹ 指令范围
Runtime instructions are narrowly scoped to listing and reading local files and archive contents. The implementation reads archive members into temporary files under /tmp (predictable names) then processes them; this is expected but creates a minor risk (race/symlink) if run in multi-user or untrusted environments. The SKILL.md correctly documents required system and Python dependencies; it does not instruct any network calls or exfiltration.
✓ 安装机制
No install spec is provided (instruction-only behavior plus an included script). There is no download-from-URL or archive extraction at install time, so no high-risk install mechanism is present. The script does depend on third-party Python packages and some system packages documented in SKILL.md.
✓ 凭证需求
The skill requests no environment variables, credentials, or config paths. All required permissions are local filesystem access to the files/archives the user asks it to read, which is proportionate to the stated purpose.
✓ 持久化与权限
The skill does not require persistent presence (always is false). It does not modify other skills or system-wide settings based on the provided files. Autonomous invocation is allowed by default but is not combined with other red flags.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/8
Initial release: support PDF/DOCX/XLSX/PPTX/RTF/ODT documents and ZIP/TAR/RAR/7Z compressed files
● 无害
安装命令
点击复制官方npx clawhub@latest install document-reader
镜像加速npx clawhub@latest install document-reader --registry https://cn.longxiaskill.com