Paperless Api

Upload and categorize documents using the Paperless-ngx API. Use for automating document management tasks with your Paperless-ngx instance.

This skill does what it claims: it uploads documents to Paperless-ngx. Before installing/using it: (1) review the script yourself (it is included) to verify it meets your needs; (2) avoid passing API keys on the command line—use environment variables, a config file with tight permissions, or another secrets mechanism; (3) fix or remove verify=False so TLS certs are validated (or ensure you use a trusted HTTPS endpoint); (4) confirm the host URL points to your Paperless instance and not an unknown remote host; (5) be aware the script prints response JSON to stdout—don't run it with sensitive output redirected where others can read it.

Type: OpenClaw Skill Name: paperless-api Version: 0.1.0 The skill provides a utility to upload documents to a Paperless-ngx instance via `scripts/upload_document.py`. It is classified as suspicious because the script explicitly disables SSL certificate verification (`verify=False`) when making API requests. This is a significant security vulnerability that could allow for the interception of sensitive API keys and document data through Man-in-the-Middle (MITM) attacks. While this behavior may be intended to support self-signed certificates in home environments, it constitutes a high-risk flaw according to security best practices.