OpenKM Document Management

OpenKM Document Management via REST API (folders, documents, metadata, versioning, search, workflows)

This skill appears to do what it says: run the included Python CLI against your OpenKM server. Before installing: (1) only provide OpenKM credentials for an account with the minimum necessary permissions (avoid full admin if not required); (2) ensure the runtime has the Python 'requests' package installed or the CLI will fail; (3) host the skill in a controlled environment (or sandbox) because it will execute a bundled Python script and will read/write local files you point it at; (4) use HTTPS for OPENKM_BASE_URL and validate the server certificate; (5) if you need stricter controls, review the openkm_cli.py source yourself — it is short and straightforward — and consider pinning the script to a vetted release or running it in a restricted container.

Type: OpenClaw Skill Name: openkm-rest Version: 1.0.1 The skill is a Python CLI client for OpenKM, designed to interact with the OpenKM REST API for document management. It requires `OPENKM_BASE_URL`, `OPENKM_USERNAME`, and `OPENKM_PASSWORD` environment variables for authentication, which are used appropriately for HTTP Basic Auth. The `SKILL.md` explicitly states the agent uses 'shell calls' to `openkm_cli.py`, which is a high-risk capability, but the Python script itself only performs HTTP requests to the specified OpenKM instance and local file I/O for uploads/downloads, without executing arbitrary shell commands or exfiltrating unrelated data. All actions are aligned with the stated purpose of OpenKM integration, and there is no evidence of prompt injection, obfuscation, or other malicious intent.