Zerox

Convert PDFs, DOCX, PPTX, and images to Markdown using zerox with GPT-4o vision, including OCR for scanned documents.

This skill will send your document contents to a remote model provider (via the zerox library). Before installing or running it, consider: 1) Privacy: do not use this on sensitive documents unless you trust the target API (api.apiyi.com or OpenAI endpoints) and its data-retention policy. 2) API key scope: provide a dedicated key with minimal scope or billing limits; storing it in ~/.openclaw/.env is supported by the script but not declared — prefer setting the env var explicitly. 3) README asks you to edit node_modules/zerox/openAI.js to point to api.apiyi.com; editing installed package code is unusual and increases risk — review that file to confirm where requests are sent. 4) Network & dependency risk: installing the 'zerox' npm package will add code that runs network requests; audit dependency versions and source before use. 5) If you need stronger assurance, request the maintainer/source repo, verify the zerox version and its openAI adapter, or run the conversion on a machine without network access to confirm behavior. These items make the skill coherent but worthy of caution.

Type: OpenClaw Skill Name: zerox Version: 0.1.0 The skill is classified as suspicious due to significant vulnerabilities. The `scripts/convert-bg.mjs` script is vulnerable to shell injection via `osascript` on macOS, as the `filePath` argument is unsanitized when used to construct notification messages, potentially allowing arbitrary command execution. Additionally, both `scripts/convert.mjs` and `scripts/convert-bg.mjs` are vulnerable to arbitrary file writes/path traversal, as the `outputPath` argument is directly used to write files without proper validation, allowing an attacker to specify locations outside the intended output directory. The skill also accesses `~/.openclaw/.env` to retrieve an API key, which, while intended and documented, highlights its ability to read user configuration files.