thu-thesis
WarnAudited by ClawScan on May 18, 2026.
Overview
The thesis converter’s main purpose is coherent, but the package contains identifiable thesis data and shows automatic citation/content changes that users should review carefully.
Before installing, inspect or remove the bundled `output/` files, run setup only if you accept pulling an unpinned upstream template, and require manual review of any generated citations or content changes before using the final thesis PDF.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing the skill may bring other people’s thesis content and personal details into the user’s agent workspace, where they could be read, reused, or confused with the user’s own document.
A published skill package includes generated thesis output containing personal resume details. This is not necessary for a converter and could expose or contaminate private academic data.
个人简历... `1987年8月20日出生于新疆喀什市。` ... `2023年9月考入清华大学经济管理学院攻读工商管理硕士至今。`
Remove bundled output/raw/parsed thesis files and reports from the release; use only synthetic samples, add cleanup/ignore rules, and clearly document where user documents are stored.
The final PDF may contain inserted or altered citations that the user did not explicitly approve, creating accuracy or academic-integrity risks.
The included report shows the workflow automatically added or completed citations using keyword matching and found some weakly related. For an academic thesis, automatic content/citation mutation is higher impact than formatting.
`Step 4.5 自动补全的关键词匹配引用存在内容关联性偏弱` ... `抽取 6 处 \\cite，发现 1-2 处 ... 关联性偏弱`
Disable automatic citation/content edits by default; present them as suggestions in the report and require explicit user approval before modifying `.tex` files or recompiling.
The exact template behavior can change depending on the current upstream repository state, and setup performs network and local file-write actions.
Setup pulls the latest upstream template and replaces local reference assets. This is disclosed and purpose-aligned, but it is unpinned and not represented in the registry install spec.
`setup.sh` ... `从 GitHub clone（首次）或 git pull（已有）最新 thuthesis 到 /tmp/thuthesis-latest` ... `rm -rf assets/databk/ && cp -r data/ assets/databk/`
Pin a thuthesis release or commit, document dependency versions in install metadata, and ask the user before refreshing local template assets.
The skill will execute local conversion and compilation commands and write generated files near the input document.
The workflow runs local Python scripts and LaTeX/BibTeX compilation. That is central to the stated converter purpose and is disclosed, but users should recognize it as local command execution.
`python3 "$SKILL_DIR/scripts/convert.py" build` ... `xelatex + bibtex`：编译 PDF（3~4 次，保证目录稳定）
Run it in a clean working directory, keep backups of the original `.docx`, and review generated LaTeX/PDF before submission.