← 返回 Skills 市场

Change permissions of PDF

Name: Change permissions of PDF
Author: crossservicesolutions

作者 CrossServiceSolutions · GitHub ↗ · v1.0.0

cross-platform ⚠ suspicious

1147

总下载

当前安装

版本数

在 OpenClaw 中安装

/install change-pdf-permissions

功能描述

Change a PDF’s permission flags (edit, print, copy, forms, annotations, etc.) by uploading it to the Solutions API, polling until completion, then returning a download URL for the updated PDF.

使用说明 (SKILL.md)

\r \r

change-pdf-permissions\r

Purpose\r

This skill changes the permission flags of a PDF (e.g., whether it can be printed, edited, or copied) by:\r

accepting a PDF file from the user,\r
accepting desired permission settings (true/false),\r
uploading them to the Solutions API,\r
polling the job status until it is finished,\r
returning the download URL for the updated PDF.\r \r

Credentials\r

The API requires an API key used as a Bearer token:\r

Authorization: Bearer \x3CAPI_KEY>\r \r How the user gets an API key:\r
https://login.cross-service-solutions.com/register\r
Or the user can provide an API key directly.\r \r Rule: never echo or log the API key.\r \r

API endpoints\r

Base URL:\r

https://api.xss-cross-service-solutions.com/solutions/solutions\r \r Create permission-change job:\r
POST /api/75\r
multipart/form-data parameters:\r
- file — required — PDF file\r
- canModify — required — "true" or "false"\r
- canModifyAnnotations — required — "true" or "false"\r
- canPrint — required — "true" or "false"\r
- canPrintHighQuality — required — "true" or "false"\r
- canAssembleDocument — required — "true" or "false"\r
- canFillInForm — required — "true" or "false"\r
- canExtractContent — required — "true" or "false"\r
- canExtractForAccessibility — required — "true" or "false"\r \r Get result by ID:\r
GET /api/\x3CID>\r \r When done, the response contains:\r
output.files[] with { name, path } where path is a downloadable URL.\r \r

Inputs\r

Required\r

PDF file (binary)\r
Permission flags (boolean-like), all required by API:\r
- canModify\r
- canModifyAnnotations\r
- canPrint\r
- canPrintHighQuality\r
- canAssembleDocument\r
- canFillInForm\r
- canExtractContent\r
- canExtractForAccessibility\r
API key (string)\r \r

Optional\r

None\r \r

Defaults (recommended)\r

If the user does not specify permissions, use a conservative default that disallows modification and extraction, but allows printing:\r \r

canModify: false\r
canModifyAnnotations: false\r
canPrint: true\r
canPrintHighQuality: true\r
canAssembleDocument: false\r
canFillInForm: true (reasonable default if forms exist)\r
canExtractContent: false\r
canExtractForAccessibility: true (often desirable for accessibility)\r \r These defaults can be adjusted per product policy.\r \r

Output\r

Return a structured result:\r

job_id (number)\r
status (string)\r
download_url (string, when done)\r
file_name (string, when available)\r
permissions (object) reflecting the final values sent\r \r Example output:\r

{\r
  "job_id": 7501,\r
  "status": "done",\r
  "download_url": "https://.../permissions.pdf",\r
  "file_name": "permissions.pdf",\r
  "permissions": {\r
    "canModify": false,\r
    "canModifyAnnotations": false,\r
    "canPrint": true,\r
    "canPrintHighQuality": true,\r
    "canAssembleDocument": false,\r
    "canFillInForm": true,\r
    "canExtractContent": false,\r
    "canExtractForAccessibility": true\r
  }\r
}\r

安全使用建议

This skill appears to be internally consistent — it uploads a PDF to an external Solutions API and returns a download URL — but exercise caution before installing or using it: - Do not upload sensitive or confidential PDFs unless you trust the service and its privacy policy. The skill transmits full document contents to api.xss-cross-service-solutions.com. - The registry metadata did not declare the required API credential (the script expects an API key via --api-key or SOLUTIONS_API_KEY). Confirm where you should obtain the key and that the provider is legitimate before supplying credentials. - Verify the provider domain (login.cross-service-solutions.com / api.xss-cross-service-solutions.com). The owner and homepage are unknown in the registry; look up the service, its privacy/security documentation, and whether it’s reputable. - Test on non-sensitive sample PDFs first and inspect returned URLs to ensure they point to the expected provider and use HTTPS. - If you need to avoid third‑party uploads, consider running a local tool that modifies PDF permissions or use an alternative trusted provider. If you want a firmer verdict, provide evidence that the service domain is trusted (official homepage, privacy policy, or company info) or confirm how API keys are issued; lacking that, treat this skill as potentially risky for sensitive documents.

功能分析

Type: OpenClaw Skill Name: change-pdf-permissions Version: 1.0.0 The skill bundle is benign. It clearly defines its purpose to change PDF permissions via a specified external API (`api.xss-cross-service-solutions.com`). The Python script uses standard libraries (`requests`, `os`) to upload a PDF, poll for status, and retrieve a download URL. API key handling is secure, reading from environment variables or arguments and explicitly stating not to log it. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts against the agent to deviate from its stated purpose. The allowed tools (`http`, `files`) are consistent with the skill's functionality.

能力评估

✓ Purpose & Capability

The name/description, SKILL.md, README, and the Python script all consistently implement changing PDF permission flags by uploading the file to the Solutions API, polling, and returning a download URL. The required request parameters, endpoints, and outputs align with the stated purpose.

⚠ Instruction Scope

The skill requires uploading user PDF files to an external service (api.xss-cross-service-solutions.com). SKILL.md and the script both rely on that network interaction and will transmit entire PDF contents off‑host. There is no explicit privacy notice or warning to users about uploading potentially sensitive documents. The runtime instructions do not instruct the agent to access unrelated local files or credentials, but they do require an API key which must be provided; the registry metadata did not declare this.

✓ Install Mechanism

No install spec is provided (instruction-only / script-only), so nothing is automatically downloaded or extracted by the skill registry. The included Python script depends on the well-known 'requests' package (requirements.txt). This is low risk from an install perspective.

⚠ Credentials

The SKILL.md and script require an API key (passed via --api-key or SOLUTIONS_API_KEY), but the registry metadata lists no required environment variables or primary credential. That mismatch is notable: the skill cannot function without an external API key, yet the registry didn't declare it. Also the skill will send arbitrary user PDFs to a third‑party service, so requiring/handling that secret and user files is a significant privilege and privacy consideration.

✓ Persistence & Privilege

The skill does not request always:true or other elevated persistence. It does not modify other skills or system configuration. The default autonomous invocation model applies (not flagged by itself).

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install change-pdf-permissions
安装完成后，直接呼叫该 Skill 的名称或使用 /change-pdf-permissions 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial release. - Allows users to change PDF permission flags (edit, print, copy, forms, annotations, etc.) via the Solutions API. - Accepts a PDF file, permission settings, and API key from the user. - Uploads the PDF to the API, polls for job completion, and returns a download URL for the updated file. - Provides recommended default permissions if user does not specify. - Outputs job status, download link, original file name, and final set permissions.

元数据

Slug change-pdf-permissions

版本 1.0.0

许可证 —

累计安装 0

当前安装数 0

历史版本数 1

常见问题