Academic Research Conflict
v1.0.0Search academic papers and conduct literature reviews using OpenAlex API (free, no key needed). Use when the user needs to find scholarly papers by topic/aut...
⭐ 0· 187·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (OpenAlex literature search, automated reviews) match the included scripts and client code which implement searching, DOI lookup, citation chains, deep read (Unpaywall), clustering, and synthesis. No unrelated services or credentials are requested.
Instruction Scope
SKILL.md and scripts are scoped to querying OpenAlex and optionally Unpaywall, generating markdown/JSON, and caching results. The instructions and code do write cache files under /tmp/litreview_cache/ (predictable path) and perform outbound HTTP requests. There is a minor mismatch in README suggesting a .env workflow even though no env variables are required by the skill.
Install Mechanism
No install spec; this is instruction/code-only. The code depends on requests (standard Python package) but no installers or external download URLs are used by the skill bundle itself.
Credentials
The skill does not declare or require environment variables, credentials, or config paths. Hardcoded MAILTO (topanga@ludwitt.com) is used for politeness in API calls. No extraneous secrets or unrelated credentials are requested.
Persistence & Privilege
always:false (normal). The code persists API responses to /tmp/litreview_cache/ for caching; this is reasonable for the task but means cached responses are stored on disk with predictable filenames and could be visible to other local users. The skill does not modify other skills or system configs.
Assessment
This skill appears to do what it says: query OpenAlex (and optionally Unpaywall) and produce literature-review outputs. Before installing or running it: 1) be aware it will make outbound HTTP requests to api.openalex.org and api.unpaywall.org (network activity). 2) it caches API responses under /tmp/litreview_cache/ (predictable location) — if you run on a multi-user system that data may be readable by others; remove the cache or run in an isolated environment if you have privacy concerns. 3) no credentials are requested, but the code includes a hardcoded contact email (used in API params) and references .env in the README (no .env actually required) — a minor documentation mismatch. 4) as with any third-party code, review the full AcademicResearchClient implementation (truncated in the bundle) and run in a sandboxed environment if you want extra safety.Like a lobster shell, security has layers — review code before you run it.
latestvk974dv20cyar5dkq1h6b8pngz182v45h
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
