Mdtero
v0.1.9Use when a user wants Mdtero to parse a paper from a DOI or URL into a structured Markdown package, translate a parsed paper while keeping structure, or down...
⭐ 1· 158·1 current·1 all-time
byJianbin Chen@jonbinc
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (parse/translate/download paper artifacts) align with the declared MDTERO_API_KEY and the documented API endpoints (api.mdtero.com); the optional ELSEVIER_API_KEY is plausibly tied to Elsevier full-text acquisition as described.
Instruction Scope
SKILL.md only instructs use of the Mdtero API and an optional local helper for publisher-fulltext acquisition. It explicitly warns about sending sensitive content to the server and tells users to review any helper installer locally. The instructions do not request unrelated files, creds, or system-wide data.
Install Mechanism
Instruction-only skill (no install spec). SKILL.md references an external local helper installer but does not itself download or run code; it advises users to inspect installers locally and not to pipe remote scripts.
Credentials
Only MDTERO_API_KEY is required (primary credential); ELSEVIER_API_KEY is optional and justified for a specific local acquisition workflow. No unrelated secrets or broad environment access are requested.
Persistence & Privilege
Skill is not always-enabled and uses normal autonomous invocation. It does not request persistent system changes or modify other skills' configs.
Assessment
This skill appears coherent and limited to Mdtero API workflows. Before installing: ensure you trust mdtero.com (API calls go to api.mdtero.com), avoid sending sensitive or proprietary manuscripts unless you accept that they will be transmitted to the service, and only install/run the local helper after downloading and reviewing the installer locally (do not pipe remote scripts). Treat your MDTERO_API_KEY like any API secret (store it securely, rotate if exposed). If you plan to use Elsevier/ScienceDirect full-text, follow the local-acquisition guidance and only provide ELSEVIER_API_KEY on machines you control.Like a lobster shell, security has layers — review code before you run it.
latestvk970k3e56fv3s28a626g66qh45841dzrtrialvk978yqbff66jfa6nh60azwbddh83fxjr
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
EnvMDTERO_API_KEY
Primary envMDTERO_API_KEY
Environment variables
MDTERO_API_KEYrequired— Required for Mdtero API authentication.ELSEVIER_API_KEYoptional— Optional. Helps local Elsevier or ScienceDirect acquisition on the user's machine.