thu-thesis

自动将清华毕业论文 Word (.docx) 转换为符合 thuthesis 官方模板规范的完整高质量 PDF，支持章节、摘要、图表、参考文献等处理。

What to consider before installing or running this skill: - Review scripts first: open scripts/setup.sh, scripts/convert.py, scripts/render.py, build_parsed.py and extract_raw.py. Confirm there are no unexpected network endpoints, telemetry, or obfuscated code paths. Do not run setup.sh until you inspect it. - Inspect setup.sh: it will git-clone https://github.com/tuna/thuthesis into /tmp and overwrite assets/databk/ (rm -rf && cp -r). If you rely on a local assets/databk/, back it up. Only run setup.sh in a controlled environment (container, VM, or sandbox). - Sandbox execution: run the tool inside an isolated container/VM with no access to sensitive host data, and with network access restricted if you want to avoid fetching remote repos. - Back up user documents: the tool creates a <stem>-latex/ folder next to the input .docx and modifies files in that directory; keep backups of your original .docx and any existing LaTeX projects before running. - Inspect included sample data: the skill archive contains many parsed/output JSON and .md files with real-looking student names, birth dates and other PII. Remove or treat these files as sensitive; they do not need to be uploaded anywhere. - Prompt-injection warning: the SKILL.md contained unicode control characters (scanner flagged). These can be used to try to influence LLM behavior. Manually inspect SKILL.md for hidden characters and remove them before allowing autonomous model steps (AI-generated struct.json or auto-repair). - Restrict agent write/network privileges: if your environment allows, restrict the agent skill's file-write scope to only a safe temp directory and disallow outbound network unless explicitly needed. Consider running the AI 'struct.json' generation step manually if you do not trust automatic writes. - Validate external sources: confirm the thuthesis repository URL and contents are legitimate (check commit history / tags). If you must update the template, prefer cloning a verified release and verifying checksums. If you are not comfortable with these manual reviews or sandboxing, do not install or run the skill. If you proceed, perform the first runs on non-sensitive sample documents.

Type: OpenClaw Skill Name: thu-thesis Version: 1.5.6 The skill bundle is a legitimate utility designed to convert Word (.docx) Tsinghua University theses into standardized LaTeX/PDF format. The scripts (extract_raw.py, build_parsed.py, render.py) use standard libraries like python-docx and jinja2 to process document content, while setup.sh fetches the official thuthesis template from the reputable TUNA (Tsinghua University TUNA Association) GitHub repository. The AI-specific instructions in SKILL.md are strictly task-oriented, directing the agent to analyze document structure and evaluate output quality without any evidence of prompt injection, data exfiltration, or malicious execution.