PubMed Search
v0.1.0AI-powered tool for searching and analyzing PubMed biomedical literature
⭐ 0· 721·5 current·6 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Skill name/description, README, SKILL.md, and the included Python code all align: they call NCBI E-utilities (eutils.ncbi.nlm.nih.gov), fetch metadata, attempt PMC PDF downloads, and accept optional PUBMED_API_KEY/PUBMED_EMAIL settings. No unrelated cloud credentials, services, or unexpected capabilities are requested.
Instruction Scope
Runtime instructions (SKILL.md) stay within the PubMed use case. They instruct asking user for query parameters, calling the included script, and optionally creating a .env with PUBMED_API_KEY and PUBMED_EMAIL. The code reads only those environment variables (via dotenv if available) and interacts with NCBI/PMC pages. It does not instruct reading or exfiltrating other local files or credentials. One caveat: the script writes downloaded PDFs to disk (as expected) and will include the provided email in API requests/user-agent (standard for NCBI).
Install Mechanism
There is no formal install spec in the registry, but SKILL.md/README recommend running external installers: 'curl -LsSf https://astral.sh/uv/install.sh | sh' to install 'uv' and an npx command to add the skill from a GitHub repo (https://github.com/JackKuo666/... ). Both are common developer conveniences but may fetch and execute third‑party code from the network. Because the skill package itself is included here, consider reviewing the repository and installer scripts before running those commands.
Credentials
Only optional environment settings are documented (PUBMED_API_KEY, PUBMED_EMAIL, PUBMED_TOOL). These are appropriate and necessary for interacting with NCBI's API and for higher rate limits; no unrelated or excessive secrets are requested.
Persistence & Privilege
The skill does not request permanent/always-on installation, does not set always: true, and does not modify other skills or system-wide settings. It operates as a normal, on-demand skill and writes only output files (downloaded PDFs) to user-specified locations.
Assessment
This skill looks coherent for PubMed searching and analysis; the included Python code matches the SKILL.md. Before installing or running: 1) Review the included pubmed_search.py yourself (it is present) to confirm behavior; 2) Avoid blindly running recommended remote installer commands (curl | sh) or npx clone commands from unknown GitHub accounts — instead inspect those scripts and the remote repo first; 3) If you provide PUBMED_EMAIL or PUBMED_API_KEY, know the email will be sent to NCBI as part of API calls (expected for polite API usage); 4) Use a dedicated directory/virtualenv when installing dependencies and check that only requests and python-dotenv are installed; 5) If unsure about the GitHub source (owner JackKuo666), prefer installing from the packaged files you already received or from an official/trusted repo.Like a lobster shell, security has layers — review code before you run it.
latestvk977ngqjn3m9jt74ch2xyp4fes81zqwx
License
MIT-0
Free to use, modify, and redistribute. No attribution required.