reMarkable Cloud

Send files and web articles to a reMarkable e-ink tablet via the reMarkable Cloud. Upload PDFs, EPUBs, or convert web articles to readable ebooks and send them to the device. Also browse and manage files on the device. Use when the user mentions reMarkable, wants to send an article or document to their e-reader, or manage reMarkable cloud files.

This skill appears to do exactly what it says: convert web pages into EPUB/PDF and upload them to your reMarkable via rmapi. Before installing, consider: 1) The SKILL.md asks you to clone and build rmapi from GitHub and place the binary in /usr/local/bin — that requires go and permission to write to that path (you’ll need elevated privileges). 2) The conversion script downloads web content and images (required for conversion) and may invoke local PDF tools (weasyprint or cupsfilter); only run it on systems where you trust these tools and the HTML being processed. 3) rmapi will store authentication tokens under ~/.rmapi — if you want to limit exposure, inspect or run rmapi manually and review its auth flow before using the wrapper. 4) Review the rmapi GitHub repo (https://github.com/ddvk/rmapi) and the included article2ebook.py if you have heightened security concerns. If you’re comfortable granting local build/install rights and allowing a tool to access the network for fetching articles and uploading to the reMarkable cloud, the skill is coherent with its stated purpose.

Type: OpenClaw Skill Name: remarkable Version: 1.1.0 The skill is classified as suspicious due to the installation of a third-party binary from source and the use of external command execution. Specifically, `SKILL.md` instructs the agent to `git clone` and `go build` the `rmapi` tool from GitHub, which introduces a supply chain risk. Additionally, `scripts/article2ebook.py` uses `subprocess.run` to execute `cupsfilter` for PDF conversion, which, while mitigated by filename sanitization, is an external command execution based on content derived from a user-provided URL. These capabilities, though plausibly needed for the stated purpose, carry inherent risks without clear malicious intent.