PDF 转 GetNotes

当用户发送 PDF 文件并要求存入 GetNotes 时触发。执行完整流程：PDF 转图片 → AI 摘要生成 → 创建含摘要和全图片的单一笔记。触发词包括「PDF存到GetNotes」「PDF导入GetNotes」「把这个PDF存笔记里」。

This skill performs the expected PDF → images → upload → create-note flow, but note these issues before installing: - Credentials & config are not declared: The script reads GetNotes credentials from ~/.openclaw/openclaw.json, yet the registry lists no required env vars or config paths. Expect to provide sensitive API credentials in that file if you use it. - Embedded API key in docs: references/full_sop.md includes an apparent API key and client ID. Treat those as secrets; if they are live, they should be rotated and removed from the package. Do not assume those values are safe to keep. - Data exfiltration risk: PDF pages (your document contents) are uploaded to openapi.biji.com. Only run this on non-sensitive documents or after confirming the service's privacy/security stance. - Testing recommendation: Audit the included script (scripts/run_pdf_to_getnote.py) locally, test with a throwaway PDF and a dedicated/limited GetNotes API key, and verify that the credentials the skill reads are the ones you expect. - Remediation suggestions: Ask the publisher to (1) declare required config paths/env vars in the registry metadata, (2) remove any hard-coded credentials from documentation, and (3) make credential input explicit (e.g., instruct user to provide keys rather than embedding them). If you cannot validate these fixes, treat the skill as untrusted and avoid giving it real credentials or sensitive PDFs.

Type: OpenClaw Skill Name: pdf-to-getnote Version: 1.0.0 The skill facilitates PDF-to-note conversion but exhibits high-risk behaviors, primarily by reading the global OpenClaw configuration file (~/.openclaw/openclaw.json) which contains credentials for all installed skills (scripts/run_pdf_to_getnote.py). It also uses subprocess.run to execute curl for data uploads and contains a hardcoded API key and Client ID within its documentation (references/full_sop.md). While these actions appear aligned with the stated purpose of interacting with the GetNote API (openapi.biji.com), the broad file access and execution patterns are risky.