Skip to content
← Registry
Trust Report

nutrient-openclaw

Use the pinned Nutrient OpenClaw plugin to convert, OCR, extract, redact, watermark, sign, or inspect the last-known local credit record for documents. Route only OpenClaw document-processing requests to its declared tools. Treat processing as an external, credit-consuming DWS transfer that requires a bounded estimate and action-time confirmation for every invocation.

82
CONDITIONAL
Format: openclawScanner: v0.8.1Duration: 9msScanned: 25d ago · Sep 10, 5:36 PMSource →
Embed this badge
AgentVerus CONDITIONAL 82AgentVerus CONDITIONAL 82AgentVerus CONDITIONAL 82
[![AgentVerus](https://agentverus.ai/api/v1/skill/84b97176-dbcb-4571-9e21-aec3496f88d7/badge)](https://agentverus.ai/skill/84b97176-dbcb-4571-9e21-aec3496f88d7)
Community Discussion

Community Comments

Public comments are the active feedback surface on skill reports right now. Use them to share implementation notes, edge cases, and operator context.

0 comments

Sign in to comment on this skill

No comments yet. Be the first to share your thoughts.

Continue the workflow

Keep this report moving through the activation path: rescan from the submit flow, capture real-world interactions, and wire the trust endpoint into your automation.

https://agentverus.ai/api/v1/skill/84b97176-dbcb-4571-9e21-aec3496f88d7/trust
Personalized next commands

Use these current-skill command blocks to keep this exact report moving through your workflow.

Record an interaction
curl -X POST https://agentverus.ai/api/v1/interactions \
  -H "Authorization: Bearer at_your_api_key" \
  -H "Content-Type: application/json" \
  -d '{"agentPlatform":"openclaw","skillId":"84b97176-dbcb-4571-9e21-aec3496f88d7","interactedAt":"2026-03-15T12:00:00Z","outcome":"success"}'
Fetch trust JSON
curl https://agentverus.ai/api/v1/skill/84b97176-dbcb-4571-9e21-aec3496f88d7/trust

Category Scores

37
Permissions
100
Injection
77
Dependencies
95
Behavioral
90
Content
100
Code Safety

Findings (14)

highCapability contract mismatch: inferred credential access is not declared-15

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: Read `{baseDir}/references/plugin-contract.md` when installing, configuring credentials

→ Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-05
highCapability contract mismatch: inferred command execution is not declared-12

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: shell

→ Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
mediumCapability contract mismatch: inferred file write is not declared-8

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: Write each output

→ Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
mediumCapability contract mismatch: inferred file read is not declared-6

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: references/

→ Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
mediumCapability contract mismatch: inferred filesystem discovery is not declared-8

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: {baseDir}

→ Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
mediumCapability contract mismatch: inferred network access is not declared-6

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: https://github.com/PSPDFKit-labs/nutrient-openclaw

→ Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-04
mediumCapability contract mismatch: inferred documentation ingestion is not declared-8

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: references/

→ Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
mediumMany external URLs referenced (6)-8

The skill references 6 external URLs and also discusses auth/API/payment workflows, which increases the chance that sensitive operations depend on many remote endpoints.

URLs: https://github.com/PSPDFKit-labs/nutrient-openclaw, https://www.npmjs.com/package/@nutrient-sdk/nutrient-openclaw, https://docs.openclaw.ai/skills, https://docs.openclaw.ai/gateway/secrets, https://docs.openclaw.ai/plugins/tool-plugins...

→ Minimize external dependencies to reduce supply chain risk.

dependenciesASST-04
mediumSkill path discovery detected (inside code block)-5

Found skill path discovery pattern: "{baseDir}"

Do not install or update the plugin merely because this skill loaded. If the user explicitly asks to install it, use the pinned package `@nutrient-sdk/nutrient-openclaw@0.1.1`, then inspect the instal

→ Treat dynamic skill path resolution and installation-path discovery as local filesystem reconnaissance. Scope which paths may be read or executed from, and avoid broad path probing unless the user explicitly requested it.

behavioralASST-03
lowUnknown external reference-5

The skill references an unknown external domain which is classified as low risk.

https://docs.openclaw.ai/skills

→ Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
lowUnknown external reference-5

The skill references an unknown external domain which is classified as low risk.

https://docs.openclaw.ai/gateway/secrets

→ Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
lowUnknown external reference-5

The skill references an unknown external domain which is classified as low risk.

https://docs.openclaw.ai/plugins/tool-plugins

→ Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
lowUnknown external reference

The skill references an unknown external domain which is classified as low risk.

https://www.nutrient.io/guides/dws-processor/pricing/calculate-credit-usage/

→ Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
infoSafety boundaries defined

The skill includes explicit safety boundaries defining what it should NOT do.

Safety boundary patterns detected in content

→ Keep these safety boundaries. They improve trust.

contentASST-09