← Back to Skills Marketplace
298
Downloads
0
Stars
0
Active Installs
4
Versions
Install in OpenClaw
/install zotero-pdf-upload
Description
Upload PDFs and manage items in a Zotero Web Library. Supports both personal and group libraries. Use when a user wants to add papers/PDFs to Zotero, organiz...
Usage Guidance
This skill appears coherent for managing a Zotero library. Before installing/using: (1) Prefer supplying the API key via environment variable (ZOTERO_API_KEY) or a secret file rather than passing it on the command line to setup.py, because setup.py will write the key into config.json if you provide it as an argument. (2) Be aware that resolving a username-based personal URL uses GET /keys/{apiKey}, which places the key in the request URL and may appear in server logs — create a least-privilege key that only grants the required permissions. (3) Review and keep config.json and any secret files protected on disk. (4) Network access to api.zotero.org is required; verify your environment's outbound rules if that matters.
Capability Analysis
Type: OpenClaw Skill
Name: zotero-pdf-upload
Version: 1.0.3
The skill is a legitimate tool for managing Zotero libraries via the official Zotero Web API. It implements robust safety practices, including mandatory manual approval flags (--approve-write, --approve-create) for all state-changing operations and a clear secret-loading precedence that favors environment variables over local configuration files. The code (scripts/zotero_client.py and scripts/zotero_workflow.py) is well-structured, lacks obfuscation, and contains no indicators of data exfiltration or unauthorized execution.
Capability Assessment
Purpose & Capability
Name/description (Zotero PDF upload + library management) matches the code and CLI: URL parsing, collection listing/matching, item creation, and optional PDF upload. The only credential requested is a Zotero API key (primaryEnv ZOTERO_API_KEY), which is appropriate for the stated integrations.
Instruction Scope
SKILL.md restricts operations to read-only inspection by default and requires explicit approval flags for writes/uploads. Runtime instructions reference only the skill directory config.json, Zotero API endpoints, and local PDF paths for attachments. One notable point: resolving a personal username URL uses GET https://api.zotero.org/keys/{apiKey}, which embeds the key in the URL (the SKILL.md correctly warns this may appear in server logs).
Install Mechanism
No install spec; scripts are instruction-run Python files. Nothing is downloaded from arbitrary URLs and no archives are extracted. This is low-risk from an install perspective.
Credentials
The skill only requires a Zotero API key (ZOTERO_API_KEY) and a local config.json; that is proportionate. Caveat: the provided setup.py writes the API key into config.json by default if called with <URL> <API_KEY>, which may persist the key on disk. The SKILL.md recommends env/file precedence and not printing keys; follow that guidance (prefer env var or a secret file).
Persistence & Privilege
always:false and user-invocable:true. The skill does not request persistent system-wide privileges or modify other skills. It writes/reads its own config.json in the skill root (expected behavior).
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install zotero-pdf-upload - After installation, invoke the skill by name or use
/zotero-pdf-upload - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.3
zotero-pdf-upload 1.0.2
- Added primary environment variable (ZOTERO_API_KEY) and required config (config.json) to metadata.
- Expanded secret handling documentation, including a security note on personal library API key lookup.
- No code changes; documentation and metadata only.
v1.0.2
zotero-pdf-upload 1.0.2
- Added primary environment variable (ZOTERO_API_KEY) and required config (config.json) to metadata.
- Expanded secret handling documentation, including a security note on personal library API key lookup.
- No code changes; documentation and metadata only.
v1.0.1
zotero-pdf-upload 1.0.1 is a documentation/baseline release with no detected code changes.
- Updated skill description for clarity and broader audience.
- Setup instructions and core commands are now easier to follow.
- Usage policy and approval checkpoints remain unchanged.
- No code or functional changes included.
v1.0.0
- Initial release of standalone Zotero workflow skill for interacting with personal and group libraries.
- Supports parsing library URLs, inspecting and heuristically matching collections, and explicit creation of collections/items with human approval.
- Allows optional PDF attachment upload with secure API key handling from environment, config file, or path.
- Operations are gated by required explicit approvals for any write actions.
- Includes setup instructions, CLI entrypoints, safety policies, and smoke test coverage.
Metadata
Frequently Asked Questions
What is zotero-pdf-upload?
Upload PDFs and manage items in a Zotero Web Library. Supports both personal and group libraries. Use when a user wants to add papers/PDFs to Zotero, organiz... It is an AI Agent Skill for Claude Code / OpenClaw, with 298 downloads so far.
How do I install zotero-pdf-upload?
Run "/install zotero-pdf-upload" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is zotero-pdf-upload free?
Yes, zotero-pdf-upload is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does zotero-pdf-upload support?
zotero-pdf-upload is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created zotero-pdf-upload?
It is built and maintained by Hao Chen (@chenhaox); the current version is v1.0.3.
More Skills