polaris-datainsight-doc-extract

Extract structured data from Office documents (DOCX, PPTX, XLSX, HWP, HWPX) using the Polaris AI DataInsight Doc Extract API. Use when the user wants to pars...

This skill appears to do what it says (send a document to Polaris DataInsight and parse the returned ZIP), but the registry metadata failing to declare the required POLARIS_DATAINSIGHT_API_KEY is a red flag you should resolve before installing. Actions to take before use: 1) Ask the publisher to update the registry metadata to list POLARIS_DATAINSIGHT_API_KEY as a required credential and to provide a homepage/source for verification. 2) Verify the API hostname (datainsight-api.polarisoffice.com) and the service terms/privacy policy on the official Polaris/Polaris Office site. 3) Only supply an API key you control; avoid putting long-lived/high-privilege credentials into shared environments. Prefer scoped or ephemeral keys if Polaris supports them. 4) Test with non-sensitive documents first to confirm where data is transmitted and how results are returned. 5) If you cannot confirm the publisher or metadata, treat the skill as untrusted and do not expose sensitive documents or secrets to it.

Type: OpenClaw Skill Name: polaris-datainsight-doc-extract Version: 1.0.0 The skill is designed to extract structured data from Office documents by uploading them to the Polaris AI DataInsight API at `https://datainsight-api.polarisoffice.com`. It retrieves an API key from the `POLARIS_DATAINSIGHT_API_KEY` environment variable, which is a standard practice for handling secrets. The Python code in `SKILL.md` demonstrates reading a local file, making an HTTPS POST request to the specified endpoint, and processing the ZIP response. There is no evidence of arbitrary command execution, unauthorized file system access beyond the input document, or data exfiltration to unrelated external endpoints. The instructions for the AI agent are aligned with the skill's stated purpose and do not contain malicious prompt injection attempts.