by 安全扫描
OpenClaw
可疑
high confidenceThe skill advertises full document-parsing capabilities (PDF/DOCX/PPT/WPS, OCR, encrypted documents, repair, etc.) but contains no code, no runtime instructions, and no declared integrations — it appears to be a non-functional placeholder or misleading listing.
评估建议
This listing appears to be a display-only placeholder rather than a working document-parsing skill. Do not expect it to actually parse or extract content from files. Before using/installing, ask the publisher for: (1) the implementation (code or service endpoints), (2) any required binaries or libraries (e.g., Tika, pdfminer, pytesseract) or cloud APIs (Google Document AI, AWS Textract) and the corresponding env vars or auth flows, and (3) a homepage or source repo and owner identity. If you nee...详细分析 ▾
⚠ 用途与能力
The name and description promise extensive document parsing and extraction features (including encrypted-doc reading, table/image extraction, repair, translation). However, the package contains no code, no required binaries, and no declared integrations or credentials. The SKILL.md even states '仅用于技能搜索展示，无执行命令' ('for skill search/display only, no execution commands'), which directly contradicts the advertised runtime capabilities.
⚠ 指令范围
The SKILL.md provides no operational instructions for reading files, invoking parsers, calling external doc-analysis APIs, or accessing uploaded documents. It does not instruct the agent to read files, use OCR, or contact any endpoint — which means it cannot actually perform the listed tasks despite claiming to trigger when users request document analysis.
✓ 安装机制
There is no install spec (instruction-only skill). That minimizes delivery risk because nothing is downloaded or written to disk. This is consistent with the file manifest (only SKILL.md present).
ℹ 凭证需求
The skill requests no environment variables, credentials, or config paths. While that reduces credential risk, it is also inconsistent with the described capabilities (real document parsing typically needs binaries/libraries or API keys for external services).
✓ 持久化与权限
Default flags (always: false, disable-model-invocation: false). The skill does not request elevated persistence or system-wide changes.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.22026/3/23
Version 1.0.2 - 在 SKILL.md 文件新增 Tags 字段，增加文档类型与功能相关标签，便于技能搜索和分类。
● 无害
安装命令
点击复制官方npx clawhub@latest install document-skill
镜像加速npx clawhub@latest install document-skill --registry https://cn.longxiaskill.com