Update plugin: enconvert/enconvert v0.0.2 - #3112
Merged
Merged
Conversation
crazywoola
approved these changes
Sep 18, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Plugin Submission
Plugin information
Submission type
What changed
Version update from 0.0.1 (merged in #2999) to 0.0.2. One behavioural change, in the Perceive URL tool only.
The EnConvert API returns a detected content-free block (an anti-bot challenge or an empty app shell) as a normal success with
is_blockedtrue and empty outputs, and does not bill it. In 0.0.1 the tool's text summary reported only the render quality and the list of outputs, so an agent could read a blocked page's summary as a successful read. In 0.0.2 the summary states explicitly that the page was blocked and must not be treated as content, and notes when the read was not billed. The JSON message returned by the tool is unchanged.No new tools, no new parameters, no new credentials, no new network destinations, no dependency changes. The other five tools are byte-identical to 0.0.1. No breaking changes.
Risk level
Required checks
.envfiles,.gitdirectories, virtual environments, caches, logs, or IDE files.PRIVACY.mdor a hosted privacy policy, andmanifest.yamlreferences it.Security and privacy notes
Unchanged from 0.0.1. The plugin makes outbound HTTPS requests only to
api.enconvert.comand, to inline Perceive URL's text output, to the signed storage URL that API returns (nyc3.digitaloceanspaces.com); both are declared inmanifest.yamlundernetwork.domains. No user input reaches the host or scheme of any request. URLs passed to Perceive URL, Discover URLs and Extract Structured are fetched by EnConvert's servers, never by the Dify host. The two convert tools take a Dify file input, not a URL. No command, code, SQL, shell or filesystem access; no bundled binaries; no telemetry. The user's API key is sent only as theX-API-Keyheader toapi.enconvert.com.Local validation
Package inspected: manifest
version0.0.2, 24 files, no.env,.venv,__pycache__or.git. An offline test drives all six tools through their real_invokeagainst a stubbed HTTP transport and asserts each POSTs to the correct endpoint and that the convert tools upload the file correctly; it passes.The same
.difypkgis attached to the source repository'sv0.0.2release, built from tagv0.0.2(commit8fd3d67).Reviewer notes
The "tested on Community Edition and Cloud" box is left unchecked for the same reason as in #2999: the tools were exercised through the plugin runtime and an offline harness rather than inside a running Dify instance. The change is confined to the text of one tool's summary message.