Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Paper Parse
v1.0.0对用户提供的任何学术论文（PDF附件或URL）进行双模式深度研读。当用户请求分析、研读、解读或总结一篇学术论文时，使用此技能。一次性生成两份报告：Part A 面向研究者的深度专业解析，Part B 面向快速理解的核心逻辑与价值提炼。
⭐ 7· 3k·17 current·18 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill's name, description, templates, and instructions all align: it reads PDFs/URLs, extracts text and key figures, performs analysis, and writes two templated reports. One minor inconsistency: SKILL.md explicitly instructs use of the pdftotext command and the platform 'file'/'message' tools, but the skill metadata lists no required binaries — if pdftotext is not provided by the runtime, the instruction will fail. Otherwise the requested actions (downloading PDFs, parsing, producing reports) are appropriate for the stated purpose.
Instruction Scope
Instructions are focused on paper parsing: extract full text (abstract→references), extract/inspect key figures, create a temp analysis file, then produce Part A and Part B using included templates and deliver via the message tool. The instructions do not ask for unrelated system files, secrets, or external endpoints beyond downloading a PDF from a provided URL. They do mandate thorough coverage (including references and figures), which is consistent with the skill's goal but may require large downloads and file processing.
Install Mechanism
This is an instruction-only skill with no install spec and no code files, so it does not write or execute new code on disk. That is the lowest-risk install profile.
Credentials
The skill declares no required environment variables, credentials, or config paths. Its runtime instructions reference only local template files included with the skill and temporary analysis files — proportionate to its purpose.
Persistence & Privilege
always is false and the skill does not request persistent system-wide changes or access to other skills' configurations. It creates temporary workspace files within its own context and uses the platform message tool to deliver results — standard and limited privilege for this functionality.
Assessment
This skill appears to do what it claims: download/parse a paper, run a structured analysis, and produce two templated reports. Before installing or using it, confirm: (1) your runtime provides pdftotext (or an equivalent PDF-to-text tool) and the platform 'file' and 'message' tools the SKILL.md references, because the metadata does not list pdftotext as a required binary; (2) you are comfortable allowing the agent to download and process full PDFs (including references and figures), which may include copyrighted or sensitive content; and (3) temporary files created during analysis will reside in the agent workspace — if you need retention or deletion guarantees, verify workspace handling/policies. If pdftotext is not available, ask the skill author to declare it or provide a fallback extraction method.Like a lobster shell, security has layers — review code before you run it.
latestvk97e90hcyy4sjwsb6cz6nhayhn80y6t0
License
MIT-0
Free to use, modify, and redistribute. No attribution required.