← Back to Skills Marketplace
85
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install zlibrary2kindle
Description
Search Z-Library for books, download them, and send to your Kindle.
Usage Guidance
The SKILL.md and the registry entry do not match: the instructions clearly require a Z-Library account and SMTP credentials (including a Gmail App Password) and write session cookies to ~/.cache and downloads to /tmp, but the registry lists no required env vars or config paths. Before installing: 1) Do not paste your primary Gmail password or other primary-account secrets into environment variables for an untrusted skill — use an app-specific or throwaway account. 2) Ask the publisher for an explicit manifest that declares required env vars and config paths, and for a source or homepage so you can review code. 3) Consider running the CLI in a sandbox or isolated account to limit cookie and download exposure. 4) Be aware of legal/ethical issues: Z-Library is a site that distributes copyrighted works; confirm you are allowed to download the books. If the publisher cannot explain why these credentials are required and show a trustworthy source, avoid installing or using this skill.
Capability Analysis
Type: OpenClaw Skill
Name: zlibrary2kindle
Version: 0.1.1
The skill bundle provides a CLI interface to search, download, and email books from Z-Library to a Kindle device. It requires high-risk sensitive information, including Z-Library credentials and Gmail SMTP App Passwords, stored as environment variables. While the instructions in skill.md are transparent and align with the stated functionality, the handling of plain-text credentials and the execution of an external package (zlibrary2kindle) via uvx or pip pose a potential security risk, as the skill relies on the integrity of an external third-party dependency to handle these secrets.
Capability Tags
Capability Assessment
Purpose & Capability
The skill claims to search Z-Library and email files to Kindle, which plausibly requires a Z-Library login and SMTP credentials; however the registry metadata lists no required environment variables or primary credential. The SKILL.md requires ZLIBRARY_EMAIL, ZLIBRARY_PASSWORD, SENDER_EMAIL, SENDER_PASSWORD and optional SMTP settings — those are not declared in the skill's manifest, indicating an incoherence between declared requirements and actual needed capabilities.
Instruction Scope
The instructions tell the agent to authenticate to ZLibrary (saving session cookies to ~/.cache/zlibrary2kindle/session.json), download files to /tmp/zlibrary2kindle/downloads/, and send email via SMTP. These actions involve reading/writing user home config and persistent cookies and handling sensitive credentials. The manifest did not surface these file paths or credential uses. The SKILL.md also instructs setting environment variables with plaintext passwords (Gmail App Password), which broadens the runtime data surface.
Install Mechanism
This is an instruction-only skill with no install spec or code files; that minimizes installation risk because nothing is fetched or written by an installer. The guidance references installing a pip package as an option, but no install behavior is included in the registry entry itself.
Credentials
The skill requires multiple sensitive secrets (ZLibrary credentials and an SMTP sender email and app password). While SMTP credentials are technically necessary to email a file to Kindle, the registry entry declares none of these as required env vars, and no primary credential is identified. Asking users to place long-lived credentials (especially Gmail app passwords) in environment variables is a sensitive practice that should be explicit in the manifest and justified.
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges. It does write session cookies to ~/.cache and downloads to /tmp, which are moderate local persistence actions but reasonable for a CLI that needs login caching. The manifest should nevertheless declare those config paths so users know what will be written to their home directory.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install zlibrary2kindle - After installation, invoke the skill by name or use
/zlibrary2kindle - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.1
- Added support for searching, downloading (EPUB preferred), and emailing books from Z-Library to your Kindle.
- Introduced CLI tools: login, search, download, and send.
- Session management with authentication caching.
- Environment variable configuration for user credentials and email settings.
- Quick workflow and setup documentation included.
Metadata
Frequently Asked Questions
What is ZLibrary2Kindle?
Search Z-Library for books, download them, and send to your Kindle. It is an AI Agent Skill for Claude Code / OpenClaw, with 85 downloads so far.
How do I install ZLibrary2Kindle?
Run "/install zlibrary2kindle" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is ZLibrary2Kindle free?
Yes, ZLibrary2Kindle is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does ZLibrary2Kindle support?
ZLibrary2Kindle is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created ZLibrary2Kindle?
It is built and maintained by SemiHum (@semihum); the current version is v0.1.1.
More Skills