OpenClaw-native PDF/document processing skill for Nutrient DWS. Best for OpenClaw users who need PDF conversion, OCR, text/table extraction, PII redaction, w...
Security Analysis
high confidenceThe skill's requirements and instructions line up with a document-processing plugin that needs an API key; nothing requests unrelated credentials or system access, though installing the linked npm plugin will pull external code you should review before use.
The name, description, and declared requirement (plugins.entries.nutrient-openclaw.config.apiKey) match a document-processing plugin that calls the Nutrient API. No unrelated credentials or binaries are requested.
SKILL.md only instructs the agent to install the plugin, configure an API key in the OpenClaw plugins config, and use a set of nutrient_* tools for PDF conversion, OCR, redaction, watermarking, signing, and credit checks. It does not ask the agent to read unrelated system files or other credentials.
This is an instruction-only skill (no bundled code). The documentation recommends installing an npm-backed plugin (@nutrient-sdk/nutrient-openclaw) via `openclaw plugins install`. Installing that package will download and run external code from npm/GitHub — a normal pattern for plugins but a moderate risk: you should review the upstream npm package and GitHub repo before installing.
The skill only requires a plugin config API key entry (plugins.entries.nutrient-openclaw.config.apiKey). No unrelated environment variables or secrets are requested, which is proportional for an API-based document-processing service.
The skill is not always-enabled, is user-invocable, and allows model invocation (platform default). It asks the user to add its own plugin config entry — normal for a plugin and not an overbroad privilege request.
Guidance
This skill is internally consistent with a document-processing plugin that needs a Nutrient API key. Before installing: (1) verify the npm package and GitHub repo (links are provided) to ensure the publisher and code look legitimate; (2) confirm the API key you provide has least privilege (e.g., only document-processing access and no broad account admin rights); (3) be aware that documents processed by the skill are sent to an external service (nutrient.io) — review the provider's privacy/security terms if you will handle sensitive or PII-containing files; (4) note a minor metadata mismatch: the registry lists version 1.2.3 while _meta.json shows 1.2.2 — you may want to confirm which package version will be installed.
Latest Release
v1.2.3
Clarify nutrient_extract_text language parameter format (string or comma-separated list) for OpenClaw compatibility.
More by @jdrhyne
Published by @jdrhyne on ClawHub
