Overleaf

Sync and manage Overleaf LaTeX projects from the command line. Pull projects locally, push changes back, compile PDFs, and download compile outputs like .bbl files for arXiv submissions. Use when working with LaTeX, Overleaf, academic papers, or arXiv.

This skill appears to be what it says: a wrapper around the olcli tool. Before installing, verify the upstream olcli project (GitHub, npm, Homebrew tap) to ensure you trust the binary you will install. Treat your Overleaf session cookie as a secret — do not paste it into untrusted chat or copies of the skill; prefer setting OVERLEAF_SESSION in your environment or using the olcli auth command locally. After authenticating, check where olcli stores credentials (~/.config/olcli-nodejs/config.json or .olauth) and secure those files (permissions). If you need stronger controls, investigate whether Overleaf offers token-based auth or OAuth instead of a browser session cookie. Finally, confirm the Homebrew tap and npm package authorship match the links in README before installing system-wide packages.

Type: OpenClaw Skill Name: overleaf-skill Version: 1.1.0 The skill is designed to manage Overleaf LaTeX projects using the `olcli` command-line tool. All instructions in `SKILL.md` and `README.md` are clearly aligned with this stated purpose, detailing how to install `olcli` via Homebrew or npm, authenticate with an Overleaf session cookie (provided by the user), and perform project management tasks. The `scripts/install.sh` file transparently handles the installation of `olcli` using standard package managers. There is no evidence of prompt injection attempts, data exfiltration beyond the scope of Overleaf interaction, or other malicious behaviors. The inherent risk of installing external dependencies via `brew tap` and `npm install -g` is present, but the skill itself does not introduce additional suspicious elements or misuse these capabilities.