cluade-scientific-writer-wrapper

PassAudited by ClawScan on May 1, 2026.

Overview

This is a coherent instruction-only scientific writing wrapper, with user-directed setup and expected API-key use, but users should review the external pip package and protect any credentials or sensitive research data they provide.

This skill appears safe to consider if you trust the external scientific-writer Python package and the AI providers you configure. Before installing, review the package source, protect your .env file, use dedicated API keys, and do not provide confidential research, patient, or proprietary data unless you are comfortable with the provider data policies.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing the package gives third-party Python code the ability to run in the user's environment.

Why it was flagged

The skill depends on installing an external Python package that is not included in the reviewed artifacts and is not version-pinned. This is central to the stated purpose, but users should review the package source and provenance before installing.

Skill content
pip install scientific-writer
Recommendation

Install only from a trusted package source, consider pinning a known-good version, and review the referenced project before use.

What this means

Provider API keys could be used to make billable requests if mishandled.

Why it was flagged

The skill requires provider API credentials and optionally uses another provider credential for research lookup. This is expected for the stated AI-writing and research functionality, but those keys grant access to user accounts and may incur usage costs.

Skill content
ANTHROPIC_API_KEY (required)
- OPENROUTER_API_KEY (optional for research lookup)
Recommendation

Use scoped or dedicated API keys where possible, monitor usage, and revoke keys if they are exposed.

What this means

Research data, images, or medical text may be processed as part of AI-assisted writing workflows.

Why it was flagged

The usage examples and listed capabilities involve local research files and potentially medical documentation, while the skill also requires external AI/research provider credentials. This is purpose-aligned, but users should understand provider data handling before supplying sensitive files.

Skill content
data_files=["editing_efficiency.csv", "western_blot.png"] ... `clinical-reports` - Medical documentation
Recommendation

Avoid submitting confidential, regulated, or patient-identifiable data unless the provider terms and privacy controls are acceptable.