Scientific Article PDF Generator

PassAudited by ClawScan on May 1, 2026.

Overview

This skill appears to be a straightforward hosted PDF-generation API integration, but it requires an EvoWeb API key and sends your article content to an external service.

Before installing, confirm that you trust Paper.EvoWeb.ai with the article drafts, product facts, and any research details you submit. Keep the EVOWEB_API_KEY private and monitor account usage or credits.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI03: Identity and Privilege Abuse

What this means

Anyone using the skill must provide an EvoWeb API key; if that key is exposed or misused, it could allow unauthorized use of the account or consume credits.

Why it was flagged

The skill requires a service API key, which is expected for this hosted API but still represents account access and possible credit usage.

Skill content

metadata: {"clawdbot":{"emoji":"📄","requires":{"bins":[],"env":["EVOWEB_API_KEY"]}}}

Recommendation

Store the API key as a secret, do not paste it into public chats or documents, and rotate it if you suspect exposure.

Low

#ASI07: Insecure Inter-Agent Communication

What this means

Draft article text, product facts, product URLs, and research focus may be processed by the external service.

Why it was flagged

The skill sends user-provided article content and product information to the external Paper.EvoWeb.ai service for processing, which is central to the stated purpose but important for users to notice.

Skill content

Send article parameters including title, product info, and draft text

Recommendation

Only submit content you are comfortable sharing with the service provider, especially if the draft or product information is confidential.