Merge PDF

Merge multiple user-provided PDF files by uploading them to Cross-Service-Solutions, polling until completion, then returning a download URL for the merged PDF.

This skill appears internally consistent and implements exactly what it claims: uploading PDFs to Cross-Service-Solutions and returning a merged-file URL. Before installing, confirm you trust the external service (https://api.xss-cross-service-solutions.com) and its privacy policy, because your PDF contents will be sent to that provider. Provide the API key via the --api-key argument or the SOLUTIONS_API_KEY environment variable (the registry metadata omitted this requirement). Avoid uploading sensitive or confidential documents to an untrusted third party; if you need an on-device merge instead, use a local tool that does not send files off-host. Finally, test with non-sensitive example PDFs to verify expected behavior and URLs.

Type: OpenClaw Skill Name: merge-pdf Version: 1.0.0 The skill is designed to merge PDF files using a third-party service, Cross-Service-Solutions (XSS). It explicitly declares `http` and `files` as allowed tools, which are necessary for its function (uploading PDFs and making API calls). The Python script reads user-provided PDF files and sends them to the specified API endpoint, handling API keys securely via environment variables or command-line arguments without logging them. The `SKILL.md` includes a security-conscious instruction not to log the API key, and there are no prompt injection attempts or other indicators of malicious intent, such as data exfiltration, unauthorized execution, or persistence mechanisms. The domain `xss-cross-service-solutions.com` is consistently used and presented as the legitimate service provider's domain, despite the 'XSS' substring.