Pharmaclaw Ip Expansion Agent
v1.0.0Intellectual Property Expansion Agent for pharma drug discovery/development teams. Proactively manages/expands IP portfolios by analyzing SMILES/molecules fr...
⭐ 0· 205·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description align with the code: RDKit fingerprinting, USPTO/ PubChem queries, portfolio tracking in SQLite, report generation and visualizations are all present. Some referenced components in the SKILL.md (patent_fetch.py, nlp_extract.py, references/nlp_patterns.md) are mentioned but not present in the bundle; agent.py implements API calls itself, but the missing files are a discrepancy to verify.
Instruction Scope
SKILL.md instructs the agent to parse SMILES, run infringement/ FTO/novelty analyses, write reports, and log to a local DB/log file. The runtime instructions do cause network calls to public patent/compound APIs and write files (ip_portfolio.db, logs/ip_expansion.log, PNG/MD reports) in the current directory. The skill does not instruct reading unrelated system files or exporting arbitrary system state.
Install Mechanism
There is no formal install spec (instruction-only), so nothing is auto-downloaded by the registry. However SKILL.md and the code assume heavy Python deps (rdkit-pypi, scispacy, spacy, pandas, requests) and the agent prints guidance to fetch a scispacy model from an S3 URL. If you install dependencies manually, be aware that large models (and an S3-hosted model) may be downloaded.
Credentials
The skill requests no environment variables or credentials in metadata, and uses public APIs (USPTO PatentsView and PubChem) that generally require no secret. A few references (EPO OPS) note keys in docs but are not used in code. The code uses scispacy UmlsEntityLinker which in some deployments requires access to external UMLS resources or model files — the skill does not declare any UMLS credentials, so verify whether additional credentials are needed for full NLP linking.
Persistence & Privilege
always is false and the skill does not request elevated/always-on privileges. It writes its own DB/logs/reports under the working directory but does not attempt to modify other skills or system-wide settings.
Assessment
This skill appears to do what it claims: chemistry fingerprinting, patent/compound API queries, NLP-based extraction, and local portfolio tracking. Before installing or running it: 1) Review agent.py fully (you have it) and confirm the network endpoints it calls (USPTO/ PubChem) are acceptable for your environment. 2) Run it in an isolated environment (container/VM) because it will install heavy Python packages and download language/chemistry models (scispacy), and it writes a local SQLite DB and log files. 3) Note that some files referenced in SKILL.md are missing — verify you have any additional scripts or models the maintainer expects. 4) Don’t pass sensitive or production-only secrets/SMILES into the agent without reviewing how/where results are stored or transmitted. 5) If you need the NLP linking features, confirm whether UMLS credentials or additional model downloads are required. If any of the above are unexpected or you need higher assurance, ask the publisher for missing files and a reproducible install spec before use.Like a lobster shell, security has layers — review code before you run it.
latestvk9728kb3ycwbw2gh7yhwwmkfb582p1dt
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
