Cnki Exp Search Automation

ReviewAudited by ClawScan on May 10, 2026.

Overview

This appears to be a CNKI search helper, but it suggests using your real browser profile, which could expose logged-in sessions to the automation.

Use this only if you are comfortable with browser automation on CNKI. Prefer an isolated browser profile, log in only to the account needed for CNKI, manually approve any broad scraping, and keep page counts and request frequency low.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ConcernMedium Confidence
ASI03: Identity and Privilege Abuse
What this means

If used with your normal browser profile, the automation may act with your existing CNKI or browser session rather than an isolated guest session.

Why it was flagged

The skill suggests operating through the user's own browser profile. That can reuse existing browser sessions or cookies, but the artifacts do not clearly limit which logged-in accounts or session data the agent may access.

Skill content
建议设置 profile="user" 使用用户浏览器以便处理验证码
Recommendation

Use a separate browser profile for this skill, log in only to CNKI if necessary, and avoid giving the agent access to your everyday browser profile.

What this means

The skill may make repeated requests to CNKI and extract multiple pages of results, which could affect account/site usage if run too broadly.

Why it was flagged

The skill documents browser automation and page JavaScript evaluation for extracting CNKI results. This is aligned with the purpose, but it can automate bulk page access.

Skill content
等待结果加载后,使用 snapshot 或 evaluate 提取数据。 ... 批量提取多页结果
Recommendation

Set a clear page limit, keep request rates low, and follow CNKI's terms and access rules.