Book a 30-minute demo →
Skill scan report

paper-summarize-pdf-to-feishu

View on GitHub
39 Medium This skill sends sensitive values to an external host. Automated analysis flagged 2 additional risk patterns.

What this skill does

论文 PDF 处理与飞书文档生成

github/leoyeai - Data Exfiltration - 2.1k stars

ThreatsData Exfiltration Configuration Risk Missing Error Handling

Threat analysis

Data Exfiltration1 finding
Configuration Risk1 finding
Missing Error Handling1 finding

Skill info

Nameleoyeai/paper-summarize-pdf-to-feishu
Registrygithub
Versione5199b5
PURLpkg:github/LeoYeAI/openclaw-master-skills@e5199b5?skill=paper-summarize-pdf-to-feishu
Stars2.1k

Assessments (3)

Data Exfiltration1 finding HIGH
HIGH

Data Exfiltration via local-llm-review

scripts/extract_pdf_text.sh

OCR 识别结果被写入到临时文件并最终合并到输出文件中,但未看到任何飞书 API 调用或数据上传逻辑,存在数据泄露风险
Configuration Risk1 finding MEDIUM
MEDIUM

Configuration Risk via local-llm-review

SKILL.md

依赖项中包含 `~/.openclaw/openclaw.json` 配置文件,但未看到任何配置文件读取或使用逻辑
Missing Error Handling1 finding LOW
LOW

Missing Error Handling via local-llm-review

scripts/check_duplicate.sh

在解析 JSON 元数据时未看到完整的错误处理逻辑,可能导致脚本崩溃

Badge

Add the Anomity scan badge for paper-summarize-pdf-to-feishu to your README.

Anomity Skill Check badge

Markdown
[![Anomity Skill Check](https://anomity.ai/skills/badge.svg)](https://anomity.ai/skills/github/leoyeai/paper-summarize-pdf-to-feishu/)
HTML
<a href="https://anomity.ai/skills/github/leoyeai/paper-summarize-pdf-to-feishu/"><img src="https://anomity.ai/skills/badge.svg" alt="Anomity Skill Check"></a>
Image URL
https://anomity.ai/skills/badge.svg

How Anomity governs this at runtime

Scan-time vetting tells you what a skill says it will do. Anomity's Endpoint Sensor sees what agents actually do: it discovers skills alongside every other AI artifact on the endpoint, and runtime governance can allow, deny, or log the tool calls a skill triggers. Policy violations route to your SIEM, Slack, email, or Jira, backed by a queryable 90-day audit trail.

Book a 30-minute demo to see your own skill inventory.

Methodology and disputes

Every skill is assessed by the Anomity Skill Intelligence engine against its public source; findings indicate risk patterns, not confirmed exploitation. Maintainer of paper-summarize-pdf-to-feishu? Report an issue or request a rescan.

Ask AI about Anomity
ChatGPT Claude Perplexity Google AI Grok