← Back to Skills Marketplace
crossservicesolutions

Compress PDF

cross-platform ⚠ suspicious
1974
Downloads
1
Stars
13
Active Installs
1
Versions
Install in OpenClaw
/install compress-pdf
Description
Compress a user-provided PDF by uploading it to Cross-Service-Solutions, polling until completion, then returning a download URL for the compressed file.
README (SKILL.md)

\r \r

compress-pdf\r

\r

Purpose\r

This skill compresses a PDF by:\r

  1. accepting a PDF file from the user,\r
  2. uploading it to the Cross-Service-Solutions compression API,\r
  3. polling the job status until it is finished,\r
  4. returning the compressed file download URL.\r \r

Credentials\r

The API requires an API key used as a Bearer token:\r

  • Authorization: Bearer \x3CAPI_KEY>\r \r How the user gets an API key:\r
  • They can sign up and get their key at:\r https://login.cross-service-solutions.com/register\r
  • Or they can provide an API key directly to the bot.\r \r Rule: never echo or log the API key.\r \r

API endpoints\r

Base URL:\r

  • https://api.xss-cross-service-solutions.com/solutions/solutions\r \r Create compression job:\r
  • POST /api/29\r
  • multipart/form-data parameters:\r
    • file (PDF Dokument) — required — PDF file\r
    • imageQuality — required — number 0..100 (default 75)\r
    • dpi — required — number 72..300 (default 144)\r \r Get result by ID:\r
  • GET /api/\x3CID>\r \r When done, the response contains:\r
  • output.files[] with { name, path } where path is a downloadable URL.\r \r

Inputs\r

Required\r

  • A PDF file (binary)\r
  • An API key (string)\r \r

Optional\r

  • imageQuality (0..100), default 75\r
  • dpi (72..300), default 144\r \r

Output\r

Return a structured result:\r

  • job_id (number)\r
  • status (string)\r
  • download_url (string, when done)\r
  • file_name (string, when available)\r
  • settings (object)\r \r Example output:\r
{\r
  "job_id": 123,\r
  "status": "done",\r
  "download_url": "https://.../compressed.pdf",\r
  "file_name": "compressed.pdf",\r
  "settings": { "imageQuality": 75, "dpi": 144 }\r
}\r
Usage Guidance
This skill appears to do what it says (upload your PDF to an external compression API and return a download URL), but note these concerns before installing: - The SKILL.md and script require an API key, yet the registry metadata does not declare a primary credential — confirm how you will provide/store the key. - The external API domain (api.xss-cross-service-solutions.com) and owner are unverified (no homepage). Verify the service reputation before sending sensitive PDFs or reusing privileged API keys. - If you must try it, prefer a non-sensitive test PDF and a dedicated or throwaway API key. Inspect the code yourself (it's small and readable) and consider running the script in a sandboxed environment. - Ask the publisher for a homepage, privacy/terms for uploaded files, and an explanation for the missing credential metadata; if you can't verify those, avoid using it with confidential documents.
Capability Analysis
Type: OpenClaw Skill Name: compress-pdf Version: 1.0.0 The skill is designed to compress PDFs by uploading them to a third-party service, polling for completion, and returning a download URL. The `SKILL.md` and `README.md` clearly define the purpose and API interactions. The `scripts/compress-pdf.py` implements this logic using standard Python libraries (`requests`), handling file uploads and HTTP requests as expected. There is no evidence of data exfiltration beyond the stated API interaction, malicious execution, persistence mechanisms, or prompt injection attempts against the agent. The broad `http` and `files` permissions are necessary for the skill's functionality and are used appropriately. The only minor flag is the use of 'XSS' in the service name and domain (`api.xss-cross-service-solutions.com`), which is a common abbreviation for Cross-Site Scripting, but it is presented as a brand name and does not indicate any malicious behavior in the code or instructions.
Capability Assessment
Purpose & Capability
The skill's name, SKILL.md, README, and Python script are coherent: they upload a PDF to Cross-Service-Solutions, poll /api/<id>, and return a download URL. However, the registry metadata lists no primary credential or required env vars even though the SKILL.md and script clearly require an API key and optionally use SOLUTIONS_API_KEY and SOLUTIONS_BASE_URL. The skill also has no homepage and an unknown owner, which reduces external verification.
Instruction Scope
Runtime instructions and the script stay within the stated scope: they accept a specified PDF path, upload only that file, poll the stated API, and return results. Allowed tools are http and files, which matches behavior. The instructions explicitly warn not to echo the API key.
Install Mechanism
No install spec (instruction-only plus a helper script). The only dependency is requests in requirements.txt. Nothing is downloaded from arbitrary URLs or written to unexpected system locations.
Credentials
The skill requires an API key (used as a Bearer token) to operate, but the registry metadata did not declare a primary credential or required env var. The script also accepts SOLUTIONS_API_KEY and SOLUTIONS_BASE_URL environment variables. Requesting a single API key is proportionate to the task, but the omission from metadata and lack of an established service homepage/owner is an inconsistency and reduces traceability.
Persistence & Privilege
The skill does not request always:true and has no elevated persistence. It doesn't modify other skills or system-wide settings. Autonomous invocation is enabled (default) but that's normal and not by itself a red flag.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install compress-pdf
  3. After installation, invoke the skill by name or use /compress-pdf
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of compress-pdf skill: - Accepts a user PDF file and compresses it using Cross-Service-Solutions API. - Polls job status until compression completes. - Returns job status, compressed file download URL, file name, and compression settings. - Requires an API key for authentication. - Supports optional image quality and DPI settings.
Metadata
Slug compress-pdf
Version 1.0.0
License
All-time Installs 14
Active Installs 13
Total Versions 1
Frequently Asked Questions

What is Compress PDF?

Compress a user-provided PDF by uploading it to Cross-Service-Solutions, polling until completion, then returning a download URL for the compressed file. It is an AI Agent Skill for Claude Code / OpenClaw, with 1974 downloads so far.

How do I install Compress PDF?

Run "/install compress-pdf" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Compress PDF free?

Yes, Compress PDF is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Compress PDF support?

Compress PDF is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Compress PDF?

It is built and maintained by CrossServiceSolutions (@crossservicesolutions); the current version is v1.0.0.

💬 Comments