wos-crawler
v1.0.1Web of Science (WOS) 文献自动爬取工具。基于 Selenium + Edge 浏览器,通过 GUI 界面输入自然语言检索词,自动构造 WOS 高级检索式,批量抓取文献标题、作者、期刊、DOI、被引频次、摘要等信息,支持分页爬取和 Excel 导出。 支持特定期刊过滤(预设期刊列表+自定义)、作...
⭐ 0· 76·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description match the delivered artifacts: a GUI Python script using Selenium to build WOS queries, navigate pages, extract metadata, and export Excel. Declared dependencies (selenium, pandas, openpyxl) and the GUI/driver approach are appropriate for the stated purpose.
Instruction Scope
SKILL.md instructions are narrowly scoped to launching the GUI and inputting search parameters; they do not request unrelated system access. However the skill offers cookie persistence, automatic screenshots, and saves exported Excel files—these features store authentication/session data and page content locally, which can include sensitive info. The instructions do not explicitly warn users about the security/privacy implications of persisted cookies or screenshots.
Install Mechanism
No install spec is provided (instruction-only install), and the runtime dependencies are standard pip packages. This is low-risk compared with arbitrary download/install URLs. Selenium Manager is referenced for driver handling, which is normal for Selenium 4.6+.
Credentials
The skill does not request environment variables, credentials, or configuration paths. The local cookie file and other saved artifacts are created by the tool itself (expected for preserving login state). No unexplained external credentials or tokens are requested.
Persistence & Privilege
The skill does not request global or always-on privileges. It persists cookies (via pickle), writes Excel exports and screenshots to disk, and may retain login state. The use of Python pickle for cookie storage is notable: unpickling untrusted data can lead to code execution if the cookie file is tampered with. These local file operations are coherent with the feature set but carry normal local-storage risks.
Assessment
This skill is coherent with its stated purpose (a Selenium-based Web of Science crawler). Before installing or running it: (1) review the script source yourself (or run it in an isolated VM/container) because it will control a browser and access webofscience.com; (2) be aware it persists cookies and saves screenshots/Excel locally—these files can contain session tokens or private content, and the script uses pickle to store cookies (unpickling tampered files can be dangerous), so only load cookie files you trust; (3) ensure scraping Web of Science complies with your institution/site terms of service; (4) install dependencies in a virtual environment and avoid running with elevated privileges; and (5) if you want to avoid cookie persistence, search-and-destroy or remove the cookie-handling code (or disable loading cookie files) before use.Like a lobster shell, security has layers — review code before you run it.
latestvk97abm9agkv0a1wmf9g2xecx6x83xhf2
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
