文档问答助手。基于本地文档（PDF/Word/Markdown/TXT）回答问题，支持知识库检索和多文档交叉验证。当用户需要：从文档中查找答案、基于文档回答问题、跨多个文档综合查询、验证信息一致性、生成文档摘要时使用此技能。

This skill is not clearly malicious, but it has multiple coherence and safety issues you should understand before running it. - Missing file: SKILL.md references scripts/index_docs.py (indexing) but that file is not included — the tool may be incomplete. - PDF parsing: the script tries to call pdfplumber via a python -c subprocess with the document path interpolated directly into the command string; that can break on paths with quotes and could be abused if an attacker controls file paths. Consider avoiding running on untrusted directories until the code is fixed. - Unsupported formats: SKILL.md claims Word/CHM support, but the script does not implement .docx/.doc/.chm parsing; running it on those files will likely fail or return '[无法读取: ...]' / placeholder text. - Search bug: the search logic treats the question as characters, not tokens/words, so it will often return no matches (especially for single-character languages like Chinese). Expect incorrect or empty results. - Dependencies: pdfplumber and any other parsing libs are not declared; install and audit them if you intend to use PDF functionality. Recommendations: 1. If you want to use this, review and fix scripts/doc_qa.py (escape/avoid constructing python -c with untrusted paths; implement proper PDF/docx parsing using libraries and declare dependencies; fix tokenization/search logic). 2. Do not run the script over directories containing files with untrusted filenames or content until the subprocess call and path handling are hardened. 3. Prefer a packaged/repo source or contact the author for the missing index script and dependency list. If you are unsure, treat the package as untrusted and inspect/fix the code locally before use.

Type: OpenClaw Skill Name: document-qa-assistant Version: 1.0.0 The script `scripts/doc_qa.py` contains a critical command injection vulnerability in the `read_file` function, where the `path` variable is unsafely interpolated into a `subprocess.run` command string. Additionally, the documentation in `SKILL.md` references a script named `scripts/index_docs.py` which is missing from the provided bundle. While these represent significant security risks and incomplete code, there is no explicit evidence of intentional malice or data exfiltration.