← Back to Skills Marketplace
byungkyu

PDF.co

by byungkyu · GitHub ↗ · v1.0.1
cross-platform ✓ Security Clean
1541
Downloads
2
Stars
1
Active Installs
2
Versions
Install in OpenClaw
/install pdf-co
Description
PDF.co API integration with managed OAuth. Convert, merge, split, edit PDFs and extract data. Use this skill when users want to convert PDFs to/from other fo...
Usage Guidance
This skill is instruction-only and coherent with its description, but note two things before installing: (1) All requests and your MATON_API_KEY will be sent to Maton-managed endpoints (gateway.maton.ai / ctrl.maton.ai / connect.maton.ai) which proxy to PDF.co — only install if you trust Maton to handle your files and credentials. (2) The MATON_API_KEY is sensitive: use a least-privilege or revocable key, monitor usage, and be prepared to revoke it if you notice unexpected activity. Because the skill can be invoked by the agent, consider whether you want autonomous calls to be allowed for operations that upload or manipulate documents.
Capability Analysis
Type: OpenClaw Skill Name: pdf-co Version: 1.0.1 The skill bundle is benign. It provides clear instructions and code examples for integrating with the PDF.co API via a Maton.ai gateway. All network calls are directed to `maton.ai` domains, and the `MATON_API_KEY` is retrieved from environment variables as expected for API authentication. There is no evidence of data exfiltration to unauthorized endpoints, malicious execution, persistence mechanisms, obfuscation, or prompt injection attempts against the agent. Potential vulnerabilities related to URL or HTML input parameters (e.g., SSRF, HTML injection) would reside in the backend PDF.co service or Maton.ai gateway, not in the skill's definition itself.
Capability Assessment
Purpose & Capability
The skill name/description (PDF.co) aligns with the provided API endpoints, but all traffic and authentication are routed through Maton-managed endpoints (gateway.maton.ai, ctrl.maton.ai, connect.maton.ai) rather than direct api.pdf.co calls. This is coherent if the maintainer intentionally provides a managed gateway, but users should be aware they are granting Maton access to perform PDF.co operations on their behalf.
Instruction Scope
SKILL.md only instructs HTTP calls to Maton endpoints and to read the single environment variable MATON_API_KEY. It does not instruct reading unrelated files, extra environment variables, or exfiltrating data to unexpected domains. The only notable behavior is the explicit proxying through Maton controllers/gateway instead of direct pdf.co endpoints.
Install Mechanism
No install spec or code files are provided (instruction-only), so nothing is written to disk or downloaded during install — this minimizes install-time risk.
Credentials
The skill requests a single environment variable (MATON_API_KEY), which matches the documented authentication method in the SKILL.md. There are no unrelated or excessive credential requests.
Persistence & Privilege
always:false and no config paths requested. The skill can be invoked by the agent (default behavior), which is expected for an API integration. There is no indication it modifies other skills or system settings.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install pdf-co
  3. After installation, invoke the skill by name or use /pdf-co
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
No user-facing changes in this release. - Version bump to 1.0.1 with no detected modifications to skill files or documentation.
v1.0.0
Initial release: Integrates PDF.co API with managed OAuth for full PDF conversion and manipulation via Maton. - Convert PDFs to/from text, CSV, JSON, HTML, XLSX, PNG, JPG, and web pages - Merge, split, delete pages, and edit PDFs - Includes detailed API references and Python examples - OAuth connection management through Maton for secure, credential-free access - Custom connection selection and multi-connection support via the Maton-Connection header
Metadata
Slug pdf-co
Version 1.0.1
License
All-time Installs 2
Active Installs 1
Total Versions 2
Frequently Asked Questions

What is PDF.co?

PDF.co API integration with managed OAuth. Convert, merge, split, edit PDFs and extract data. Use this skill when users want to convert PDFs to/from other fo... It is an AI Agent Skill for Claude Code / OpenClaw, with 1541 downloads so far.

How do I install PDF.co?

Run "/install pdf-co" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is PDF.co free?

Yes, PDF.co is completely free (open-source). You can download, install and use it at no cost.

Which platforms does PDF.co support?

PDF.co is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created PDF.co?

It is built and maintained by byungkyu (@byungkyu); the current version is v1.0.1.

💬 Comments