by 安全扫描
OpenClaw
可疑
medium confidenceThe skill mostly does what its name says (file conversions) but includes undocumented remote license validation and local caching of API keys, and the package metadata does not declare the credentials/config it actually uses — this mismatch is concerning.
评估建议
This package implements the advertised conversion features, but it also performs remote license/token verification and caches results locally — and the registry metadata does not declare the credential/config requirement. Before installing or using it: (1) Inspect the full converter.py (the file here is truncated) to confirm exactly what data is sent to geo-api.yk-global.com and whether any user-supplied keys are transmitted. (2) Do not reuse sensitive API keys (AWS, GitHub, email, banking keys)...详细分析 ▾
ℹ 用途与能力
The code implements many conversion routines (CSV/Excel/JSON/PDF/Markdown/etc.) that match the skill name and description. However the converter also contains license/token verification logic that contacts an external endpoint (geo-api.yk-global.com) and expects an API key/tokens with specific prefixes — the skill metadata declared no required credentials or config paths, which is inconsistent with the monetization/tier behavior described in SKILL.md.
⚠ 指令范围
SKILL.md describes uploading files, tiered tokens, and editing a config.yaml, but it does not clearly state where or how an API key/token should be supplied. The runtime instructions (and code) perform outbound HTTP requests for token verification and will read/write a local cache under the user's home directory. Those network and file operations are outside simple format conversion and are not fully documented in the skill metadata or requirements.
ℹ 安装机制
There is no formal install spec in the registry, but the bundle includes scripts/requirements.txt and Python source requiring third-party packages (pandas, pillow, pytesseract, etc.). That means a user/agent must install dependencies (pip and system-level Tesseract) before use; the lack of an explicit install instruction in the registry metadata is an omission but not necessarily malicious.
⚠ 凭证需求
The skill requests no environment variables or primary credential in metadata, yet the code contains a verify_token(api_key) flow that will send an Authorization header if an API key is available and will cache results (and potentially the key-derived cache entry) to ~/.batch_converter_cache. This is a mismatch: the skill can accept and transmit secrets (API keys) but does not declare or explain that in the registry entries or SKILL.md clearly. The VALID_PREFIXES list suggests the code is written to accept many types of prefixes; that broad acceptance increases the chance users could accidentally send unrelated keys.
ℹ 持久化与权限
The skill does not request elevated runtime privileges and always:false. It will create a local cache directory (~/.batch_converter_cache) and write cached JSON (5-minute TTL). Persisting caches and config files is expected for a tool with licensing, but users should be aware of local files being created and possibly containing metadata about API keys/verification results.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/21
batch-format-converter-pro 1.0.0 – Initial Release - Batch convert between CSV, Excel, JSON, PDF, Markdown, DOCX, HTML, PNG, JPG, and TXT formats. - Free tier allows up to 10 files in total, with standard/pro/max plans unlocking higher or unlimited limits and AI-powered custom conversions. - Integrates with Feishu for notifications and result delivery via attachments. - Robust error handling: encoding auto-detection, unsupported format tips, and file corruption checks. - Uses pandas, PyMuPDF, pdfplumber, pandoc, python-docx, and Pillow for conversions. - Simple command syntax for both regular and AI custom conversion requests.
● 可疑
安装命令
点击复制官方npx clawhub@latest install batch-format-converter-pro
镜像加速npx clawhub@latest install batch-format-converter-pro --registry https://cn.longxiaskill.com