paperless-ngx-tools

Manage documents in Paperless-ngx - search, upload, tag, and retrieve.

This skill appears to do what it claims: run the included Node scripts to manage Paperless-ngx via its API. Before installing: 1) Ensure you have Node.js available locally (SKILL.md uses `node` but the registry entry didn't list it). 2) Only set PAPERLESS_URL to a trusted Paperless host and store PAPERLESS_TOKEN securely (the token gives API access to your documents). 3) Review the uploaded/download paths you use (the scripts will read local files for upload and write files for download). 4) Because the skill can be invoked by the agent, consider whether you want autonomous runs using that token; revoke/regenerate the token in Paperless if you later stop using the skill. If you need higher assurance, inspect the bundled scripts yourself (they are included) before running.

Type: OpenClaw Skill Name: paperless-ngx-tools Version: 1.0.2 The skill bundle is designed to interact with the Paperless-ngx API for document management. All Node.js scripts (`.mjs`) correctly utilize `PAPERLESS_URL` and `PAPERLESS_TOKEN` from environment variables to make authenticated API calls to the specified Paperless-ngx instance. File system operations (reading for upload, writing for download) are directly related to the skill's stated purpose and do not target sensitive system paths or execute arbitrary commands. The `SKILL.md` documentation provides clear instructions for using the skill and does not contain any prompt injection attempts or instructions for malicious behavior. No external dependencies, obfuscation, or unauthorized network/system access were identified.