by 安全扫描
OpenClaw
安全
medium confidenceNULL
评估建议
This skill appears to do what it says: it uploads files to lab.hjcloud.com for conversion and saves results next to the original file. Before installing or using it, consider: (1) Do not upload sensitive/confidential documents unless you trust the service and have reviewed its privacy/data‑retention policy; the SKILL.md warns about this. (2) Verify the endpoint (lab.hjcloud.com) and the project homepage; test with non‑sensitive files first. (3) Review the rest of the script (particularly ZIP ext...详细分析 ▾
✓ 用途与能力
Name, description, SKILL.md, and the included Node script all describe and implement the same behavior: read a local file, POST it to https://lab.hjcloud.com/llmdoc, poll for conversion, download a ZIP or single MD, and write output next to the source. Required binary 'node' is appropriate.
ℹ 指令范围
Instructions and code explicitly read the provided file, upload it to the remote service, poll for status, download results, and write files into the source file's parent directory. This is within the declared scope, but it does involve uploading user documents off‑host and creating files/directories locally — both are explicit in SKILL.md and should be acceptable only if the user is comfortable with that.
✓ 安装机制
No install spec; the skill is a bundled Node script and SKILL.md that runs with the system 'node' binary. Nothing is downloaded from unknown URLs during install; network activity occurs at runtime to the service endpoint.
✓ 凭证需求
The skill requests no environment variables or credentials. It communicates with a single service endpoint (lab.hjcloud.com) which matches the skill purpose. No unrelated secrets or config paths are requested.
✓ 持久化与权限
The skill does not request persistent or elevated platform privileges and is not configured always:true. It reads/writes files only in the same directory as the supplied source file (as documented).
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.102026/3/26
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install doc2markdown
镜像加速npx clawhub@latest install doc2markdown --registry https://cn.longxiaskill.com