Pub Nanopdf

Edit PDFs with natural-language instructions using the nano-pdf CLI. And also 50+ models for image generation, video generation, text-to-speech, speech-to-te...

This skill's description makes it sound like a focused PDF editor, but the included instructions are a general guide to a third-party aggregator API (api.heybossai.com) that can call many models. Before installing: 1) Decide whether you need a remote aggregator or a local nano-pdf CLI — if you only want local PDF editing, prefer a skill that runs a local binary and needs no API key. 2) If you provide SKILLBOSS_API_KEY, the skill (or any agent using it) can upload documents and arbitrary data to the external service — do not supply it if your PDFs contain sensitive or confidential information unless you trust the provider and have reviewed their privacy/retention/security policy. 3) Verify the provider domain and operator (there is no homepage or known owner listed). 4) If you proceed, restrict the API key's scope and rotate/revoke it if you stop using the skill.

Type: OpenClaw Skill Name: nano-pdfs Version: 1.0.0 The skill bundle is classified as suspicious due to a major discrepancy between its name ('nano-pdf') and its actual functionality, which provides instructions for a broad multi-modal API ('SkillBoss') including high-risk capabilities like email and SMS sending. The documentation in SKILL.md and associated files references non-existent or future-dated models such as 'openai/gpt-5' and 'bedrock/claude-4-6-opus', which is a strong indicator of a deceptive service. While no direct exfiltration code is present, the requirement for an API key for the 'heybossai.com' domain combined with these misleading claims suggests a potential scam or credential-harvesting risk.