← 返回 Skills 市场
Overleaf
作者
Eason Chen
· GitHub ↗
· v1.2.0
· MIT-0
1710
总下载
1
收藏
6
当前安装
5
版本数
在 OpenClaw 中安装
/install overleaf
功能描述
Access Overleaf projects via CLI. Use for reading/writing LaTeX files, syncing local .tex files to Overleaf, downloading projects, managing Overleaf project...
安全使用建议
This skill does what it says: it uses the pyoverleaf client and your browser session (cookies stored in OS keychain) to list, read, write, download, and accept Overleaf project invites. Before installing: (1) Review the pyoverleaf GitHub source and recent releases yourself (the SKILL.md claims an audit of v0.1.7 but you should verify the version you install). (2) Test pyoverleaf locally by running pyoverleaf ls to trigger the keychain prompt so you see what permissions are requested. (3) On shared machines, avoid granting global 'Always Allow' keychain access; consider using a separate browser profile or machine for Overleaf automation. (4) If you do not want the agent to autonomously accept invites or push edits, keep autonomous invocation disabled for this skill or limit its permissions. (5) Monitor Overleaf's history/audit after first runs and revoke sessions or change passwords if you see unexpected activity.
功能分析
Type: OpenClaw Skill
Name: overleaf
Version: 1.2.0
The skill requires 'Always Allow' keychain access to read browser cookies via the pyoverleaf dependency, which is a high-risk permission that could potentially expose all stored browser credentials. While the documentation in SKILL.md is transparent about this requirement for Overleaf authentication and provides logic for programmatic invite acceptance, the broad access to sensitive browser data and the use of private API scraping (CSRF token extraction) constitute a significant security risk.
能力评估
Purpose & Capability
Name/description (Overleaf CLI access, read/write/sync/accept invites) matches the included instructions and the small helper script. Requiring browser cookies / keychain access is proportionate for a tool that authenticates via a logged-in browser session.
Instruction Scope
SKILL.md instructs the agent to use pyoverleaf, read browser cookies (via OS keychain) and to programmatically accept Overleaf invites using the site's endpoints. These actions are within the stated feature set, but reading browser cookies and accepting invites are sensitive operations — the doc calls this out but the agent could perform invite acceptance autonomously if allowed.
Install Mechanism
No install spec in the registry (instruction-only). The README/SKILL.md recommend installing pyoverleaf via pipx (PyPI) — a standard distribution channel. This is expected for a Python CLI; the install risk is moderate and typical for such a skill.
Credentials
The skill requests no environment variables or other credentials, which is consistent. However, it relies on access to browser cookies/keychain (macOS keychain 'Always Allow' is explicitly mentioned). That is sensitive (gives access to authenticated Overleaf session cookies) and should be considered before granting access.
Persistence & Privilege
always is false and there are no special persistence or system-wide config changes. The skill can be invoked autonomously (platform default), which combined with cookie access could let the agent accept invites or sync files without manual interaction — expected for the feature set but worth user caution.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install overleaf - 安装完成后,直接呼叫该 Skill 的名称或使用
/overleaf触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.2.0
Add accept project invitations feature: programmatically accept Overleaf invites via notifications API + CSRF token, no manual clicking required
v1.1.1
Add www.overleaf.com workaround for websocket redirect bug
v1.0.2
Add example image showing em-dash removal workflow
v1.0.1
Add security audit notes, Python API for reliable uploads
v1.0.0
Overleaf skill initial release — access and manage Overleaf LaTeX projects from the CLI.
- Interact with Overleaf via Python CLI tool using browser cookies for authentication.
- Read, write, sync, and manage project files and folders from the command line.
- Download entire projects as zip files.
- Supports file uploads (recommended via Python API for reliability and version history).
- Includes setup, authentication, and security instructions.
- Details troubleshooting for common authentication and permission issues.
元数据
常见问题
Overleaf 是什么?
Access Overleaf projects via CLI. Use for reading/writing LaTeX files, syncing local .tex files to Overleaf, downloading projects, managing Overleaf project... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 1710 次。
如何安装 Overleaf?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install overleaf」即可一键安装,无需额外配置。
Overleaf 是免费的吗?
是的,Overleaf 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
Overleaf 支持哪些平台?
Overleaf 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Overleaf?
由 Eason Chen(@easonc13)开发并维护,当前版本 v1.2.0。
推荐 Skills