Ai Research Scraper
v1.8.14用于抓取AI领域最新研究信息的技能，重点关注AI产品发展。从知名AI网站获取信息，提供简洁概括和链接，限制数据量以便快速阅读。
⭐ 1· 2.3k·7 current·7 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
SKILL.md says it scrapes AI sites and provides concise summaries. The code does implement scraping and summarization, but it also depends on an external 'tavily-search' skill (invoking /root/.openclaw/workspace/skills/tavily-search/scripts/search.mjs via subprocess) and references multiple translation API clients/tests. The skill's registry metadata declares no required env vars or binaries, yet the code implies node must be present and external API keys may be needed. Those dependencies are not declared and are disproportionate to the simple description.
Instruction Scope
SKILL.md runtime instruction is to run scripts/scraper.py. The scripts do call subprocess to run another skill's Node script and make network calls to translation/search endpoints. Some scripts (e.g., simple_scraper.py) import translate_text from scraper.py, but scraper.py does not define translate_text—indicating broken or inconsistent instructions. The instructions do not mention the tavily-search dependency, Node requirement, or required API keys.
Install Mechanism
There is no install spec (instruction-only), so nothing will be automatically downloaded or installed by the registry. However the package includes runnable Python scripts that assume a runtime (node) and presence of another skill's files; running them will execute local code and spawn external processes. Lack of an install step reduces supply-chain risk but does not eliminate execution risk when the scripts are run.
Credentials
The skill declares no required environment variables or credentials, yet references translation APIs and Tavily Search in docs and tests that expect API keys (e.g., TAVILY_API_KEY, Google/Microsoft/Baidu/Youdao credentials). Tests and api_reference.md show explicit API-key usage. This mismatch (code/doc expecting secrets but metadata declaring none) is a red flag: running tests or enabling translation/search fallbacks could prompt you to add sensitive credentials without the skill declaring why.
Persistence & Privilege
The skill does not request always:true and is user-invocable only. It does not modify other skills or system-wide settings in the provided code. However it does spawn subprocesses that execute another skill's script from the workspace, which effectively grants it the ability to run code located in other skill directories—this increases runtime blast radius even though the skill itself does not persistently install or escalate privileges.
What to consider before installing
This skill is internally inconsistent and should be treated with caution. Before installing or running it:
- Inspect the tavily-search skill referenced at /root/.openclaw/workspace/skills/tavily-search/scripts/search.mjs (the scraper invokes that Node script). Ensure you trust that code and that Node is the expected runtime.
- Do not provide API keys or other credentials until the skill explicitly documents and declares them in metadata. The repo mentions Tavily and various translation APIs but the metadata lists no required env vars.
- Be aware some scripts reference missing functions (e.g., translate_text) or rely on files that may not exist—the package may be broken or incomplete.
- Run the scripts in a sandbox (non-root container) first and review network calls (outbound endpoints) to confirm they contact expected services (official blogs, known translation endpoints, or tavily api), not unknown domains.
- If you need this functionality, ask the maintainer for an explicit dependency list (node, required skills), a manifest of required environment variables, and a fix for the missing/unused functions before granting any credentials or running the skill in production.Like a lobster shell, security has layers — review code before you run it.
aivk972tjyqxxa53ca3avs4gy8enh811rgklatestvk97bygspg1wqv0ghevgz9yqwcx810cahproduct-developmentvk972tjyqxxa53ca3avs4gy8enh811rgkresearchvk972tjyqxxa53ca3avs4gy8enh811rgkscrapervk972tjyqxxa53ca3avs4gy8enh811rgk
License
MIT-0
Free to use, modify, and redistribute. No attribution required.