← 返回 Skills 市场
298
总下载
0
收藏
0
当前安装
4
版本数
在 OpenClaw 中安装
/install zotero-pdf-upload
功能描述
Upload PDFs and manage items in a Zotero Web Library. Supports both personal and group libraries. Use when a user wants to add papers/PDFs to Zotero, organiz...
安全使用建议
This skill appears coherent for managing a Zotero library. Before installing/using: (1) Prefer supplying the API key via environment variable (ZOTERO_API_KEY) or a secret file rather than passing it on the command line to setup.py, because setup.py will write the key into config.json if you provide it as an argument. (2) Be aware that resolving a username-based personal URL uses GET /keys/{apiKey}, which places the key in the request URL and may appear in server logs — create a least-privilege key that only grants the required permissions. (3) Review and keep config.json and any secret files protected on disk. (4) Network access to api.zotero.org is required; verify your environment's outbound rules if that matters.
功能分析
Type: OpenClaw Skill
Name: zotero-pdf-upload
Version: 1.0.3
The skill is a legitimate tool for managing Zotero libraries via the official Zotero Web API. It implements robust safety practices, including mandatory manual approval flags (--approve-write, --approve-create) for all state-changing operations and a clear secret-loading precedence that favors environment variables over local configuration files. The code (scripts/zotero_client.py and scripts/zotero_workflow.py) is well-structured, lacks obfuscation, and contains no indicators of data exfiltration or unauthorized execution.
能力评估
Purpose & Capability
Name/description (Zotero PDF upload + library management) matches the code and CLI: URL parsing, collection listing/matching, item creation, and optional PDF upload. The only credential requested is a Zotero API key (primaryEnv ZOTERO_API_KEY), which is appropriate for the stated integrations.
Instruction Scope
SKILL.md restricts operations to read-only inspection by default and requires explicit approval flags for writes/uploads. Runtime instructions reference only the skill directory config.json, Zotero API endpoints, and local PDF paths for attachments. One notable point: resolving a personal username URL uses GET https://api.zotero.org/keys/{apiKey}, which embeds the key in the URL (the SKILL.md correctly warns this may appear in server logs).
Install Mechanism
No install spec; scripts are instruction-run Python files. Nothing is downloaded from arbitrary URLs and no archives are extracted. This is low-risk from an install perspective.
Credentials
The skill only requires a Zotero API key (ZOTERO_API_KEY) and a local config.json; that is proportionate. Caveat: the provided setup.py writes the API key into config.json by default if called with <URL> <API_KEY>, which may persist the key on disk. The SKILL.md recommends env/file precedence and not printing keys; follow that guidance (prefer env var or a secret file).
Persistence & Privilege
always:false and user-invocable:true. The skill does not request persistent system-wide privileges or modify other skills. It writes/reads its own config.json in the skill root (expected behavior).
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install zotero-pdf-upload - 安装完成后，直接呼叫该 Skill 的名称或使用
/zotero-pdf-upload触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.3
zotero-pdf-upload 1.0.2
- Added primary environment variable (ZOTERO_API_KEY) and required config (config.json) to metadata.
- Expanded secret handling documentation, including a security note on personal library API key lookup.
- No code changes; documentation and metadata only.
v1.0.2
zotero-pdf-upload 1.0.2
- Added primary environment variable (ZOTERO_API_KEY) and required config (config.json) to metadata.
- Expanded secret handling documentation, including a security note on personal library API key lookup.
- No code changes; documentation and metadata only.
v1.0.1
zotero-pdf-upload 1.0.1 is a documentation/baseline release with no detected code changes.
- Updated skill description for clarity and broader audience.
- Setup instructions and core commands are now easier to follow.
- Usage policy and approval checkpoints remain unchanged.
- No code or functional changes included.
v1.0.0
- Initial release of standalone Zotero workflow skill for interacting with personal and group libraries.
- Supports parsing library URLs, inspecting and heuristically matching collections, and explicit creation of collections/items with human approval.
- Allows optional PDF attachment upload with secure API key handling from environment, config file, or path.
- Operations are gated by required explicit approvals for any write actions.
- Includes setup instructions, CLI entrypoints, safety policies, and smoke test coverage.
元数据
常见问题
zotero-pdf-upload 是什么？
Upload PDFs and manage items in a Zotero Web Library. Supports both personal and group libraries. Use when a user wants to add papers/PDFs to Zotero, organiz... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 298 次。
如何安装 zotero-pdf-upload？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install zotero-pdf-upload」即可一键安装，无需额外配置。
zotero-pdf-upload 是免费的吗？
是的，zotero-pdf-upload 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
zotero-pdf-upload 支持哪些平台？
zotero-pdf-upload 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 zotero-pdf-upload？
由 Hao Chen（@chenhaox）开发并维护，当前版本 v1.0.3。
推荐 Skills