← Back to Skills Marketplace
Overleaf
by
Eason Chen
· GitHub ↗
· v1.2.0
· MIT-0
1710
Downloads
1
Stars
6
Active Installs
5
Versions
Install in OpenClaw
/install overleaf
Description
Access Overleaf projects via CLI. Use for reading/writing LaTeX files, syncing local .tex files to Overleaf, downloading projects, managing Overleaf project...
Usage Guidance
This skill does what it says: it uses the pyoverleaf client and your browser session (cookies stored in OS keychain) to list, read, write, download, and accept Overleaf project invites. Before installing: (1) Review the pyoverleaf GitHub source and recent releases yourself (the SKILL.md claims an audit of v0.1.7 but you should verify the version you install). (2) Test pyoverleaf locally by running pyoverleaf ls to trigger the keychain prompt so you see what permissions are requested. (3) On shared machines, avoid granting global 'Always Allow' keychain access; consider using a separate browser profile or machine for Overleaf automation. (4) If you do not want the agent to autonomously accept invites or push edits, keep autonomous invocation disabled for this skill or limit its permissions. (5) Monitor Overleaf's history/audit after first runs and revoke sessions or change passwords if you see unexpected activity.
Capability Analysis
Type: OpenClaw Skill
Name: overleaf
Version: 1.2.0
The skill requires 'Always Allow' keychain access to read browser cookies via the pyoverleaf dependency, which is a high-risk permission that could potentially expose all stored browser credentials. While the documentation in SKILL.md is transparent about this requirement for Overleaf authentication and provides logic for programmatic invite acceptance, the broad access to sensitive browser data and the use of private API scraping (CSRF token extraction) constitute a significant security risk.
Capability Assessment
Purpose & Capability
Name/description (Overleaf CLI access, read/write/sync/accept invites) matches the included instructions and the small helper script. Requiring browser cookies / keychain access is proportionate for a tool that authenticates via a logged-in browser session.
Instruction Scope
SKILL.md instructs the agent to use pyoverleaf, read browser cookies (via OS keychain) and to programmatically accept Overleaf invites using the site's endpoints. These actions are within the stated feature set, but reading browser cookies and accepting invites are sensitive operations — the doc calls this out but the agent could perform invite acceptance autonomously if allowed.
Install Mechanism
No install spec in the registry (instruction-only). The README/SKILL.md recommend installing pyoverleaf via pipx (PyPI) — a standard distribution channel. This is expected for a Python CLI; the install risk is moderate and typical for such a skill.
Credentials
The skill requests no environment variables or other credentials, which is consistent. However, it relies on access to browser cookies/keychain (macOS keychain 'Always Allow' is explicitly mentioned). That is sensitive (gives access to authenticated Overleaf session cookies) and should be considered before granting access.
Persistence & Privilege
always is false and there are no special persistence or system-wide config changes. The skill can be invoked autonomously (platform default), which combined with cookie access could let the agent accept invites or sync files without manual interaction — expected for the feature set but worth user caution.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install overleaf - After installation, invoke the skill by name or use
/overleaf - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.2.0
Add accept project invitations feature: programmatically accept Overleaf invites via notifications API + CSRF token, no manual clicking required
v1.1.1
Add www.overleaf.com workaround for websocket redirect bug
v1.0.2
Add example image showing em-dash removal workflow
v1.0.1
Add security audit notes, Python API for reliable uploads
v1.0.0
Overleaf skill initial release — access and manage Overleaf LaTeX projects from the CLI.
- Interact with Overleaf via Python CLI tool using browser cookies for authentication.
- Read, write, sync, and manage project files and folders from the command line.
- Download entire projects as zip files.
- Supports file uploads (recommended via Python API for reliability and version history).
- Includes setup, authentication, and security instructions.
- Details troubleshooting for common authentication and permission issues.
Metadata
Frequently Asked Questions
What is Overleaf?
Access Overleaf projects via CLI. Use for reading/writing LaTeX files, syncing local .tex files to Overleaf, downloading projects, managing Overleaf project... It is an AI Agent Skill for Claude Code / OpenClaw, with 1710 downloads so far.
How do I install Overleaf?
Run "/install overleaf" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Overleaf free?
Yes, Overleaf is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Overleaf support?
Overleaf is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Overleaf?
It is built and maintained by Eason Chen (@easonc13); the current version is v1.2.0.
More Skills