← 返回 Skills 市场
100
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install paperless-api
功能描述
Upload and categorize documents using the Paperless-ngx API. Use for automating document management tasks with your Paperless-ngx instance.
安全使用建议
This skill does what it claims: it uploads documents to Paperless-ngx. Before installing/using it: (1) review the script yourself (it is included) to verify it meets your needs; (2) avoid passing API keys on the command line—use environment variables, a config file with tight permissions, or another secrets mechanism; (3) fix or remove verify=False so TLS certs are validated (or ensure you use a trusted HTTPS endpoint); (4) confirm the host URL points to your Paperless instance and not an unknown remote host; (5) be aware the script prints response JSON to stdout—don't run it with sensitive output redirected where others can read it.
功能分析
Type: OpenClaw Skill
Name: paperless-api
Version: 0.1.0
The skill provides a utility to upload documents to a Paperless-ngx instance via `scripts/upload_document.py`. It is classified as suspicious because the script explicitly disables SSL certificate verification (`verify=False`) when making API requests. This is a significant security vulnerability that could allow for the interception of sensitive API keys and document data through Man-in-the-Middle (MITM) attacks. While this behavior may be intended to support self-signed certificates in home environments, it constitutes a high-risk flaw according to security best practices.
能力评估
Purpose & Capability
Name/description match the included code and instructions: the SKILL.md and scripts/upload_document.py both implement document upload and basic categorization via the Paperless-ngx API. No unrelated services, binaries, or credentials are requested.
Instruction Scope
Instructions are narrowly scoped: run the included Python script with --host and --api_key and optional metadata. Notable issues: the script disables TLS certificate verification (requests.post(..., verify=False)), and the SKILL.md demonstrates passing the API key on the command line (which can expose secrets in process lists or shell history). These are security/hygiene concerns but not evidence of malicious or incoherent behavior.
Install Mechanism
There is no install spec (instruction-only with a small helper script). No downloads or package installs are performed by the skill, so there is minimal install-time risk.
Credentials
The skill requires an API key and host to function, but these are provided as command-line arguments rather than declared environment variables. The requested credentials are proportional to the stated purpose. Consider that passing secrets on the CLI is less safe than using environment variables or a secrets store.
Persistence & Privilege
The skill does not request persistent platform privileges (always is false). It does not modify other skills or system configuration and does not require elevated/system-wide access.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install paperless-api - 安装完成后，直接呼叫该 Skill 的名称或使用
/paperless-api触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.0
Initial release of the Paperless API skill.
- Upload and categorize documents in your Paperless-ngx instance via API.
- Supports custom titles, tags, and document types on upload.
- Simple configuration with host URL and API key.
- Includes a command-line script for document upload automation.
元数据
常见问题
Paperless Api 是什么？
Upload and categorize documents using the Paperless-ngx API. Use for automating document management tasks with your Paperless-ngx instance. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 100 次。
如何安装 Paperless Api？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install paperless-api」即可一键安装，无需额外配置。
Paperless Api 是免费的吗？
是的，Paperless Api 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Paperless Api 支持哪些平台？
Paperless Api 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Paperless Api？
由 ThisTine（@thistine）开发并维护，当前版本 v0.1.0。
推荐 Skills