Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Zhihuiya Pdf

v1.0.0

通过专利ID或公开号从智慧芽专利数据库下载专利PDF全文文档。当用户提到专利PDF下载、专利全文、专利文件获取、公开号查询、专利家族PDF替代、批量专利PDF导出、patent PDF download, patent full-text document, patent file download, PatSn...

0· 11·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The skill claims to retrieve Zhihuiya patent PDFs via the LinkFox gateway and the included script and API docs call https://tool-gateway.linkfox.com/zhihuiya/pdfData — this is coherent. However, the skill metadata lists no required environment variables while the API reference and the Python script expect an API key (LINKFOXAGENT_API_KEY). The missing declaration is disproportionate to the manifest and should have been listed in requires.env.
Instruction Scope
SKILL.md describes calling the LinkFox API and presenting download links; it does not instruct reading unrelated system files. The runtime instructions and the script explicitly read an environment variable LINKFOXAGENT_API_KEY and call two external endpoints (tool-gateway.linkfox.com for data and skill-api.linkfox.com for feedback). Those network calls are expected for this purpose, but the instructions assume the agent can access an undeclared API key.
Install Mechanism
This is an instruction-only skill with a small helper Python script included; there is no install spec or remote download. No archives or third-party packages are pulled during install, which keeps install risk low.
!
Credentials
Functionality legitimately requires a single API key (LINKFOXAGENT_API_KEY). However, the skill manifest did not declare this required environment variable. The script will fail without it, and the manifest omission is a transparency/security concern. No other unrelated secrets are requested.
Persistence & Privilege
The skill does not request persistent or elevated presence (always is false), does not modify other skills or system-wide settings, and does not declare any config paths. Autonomous invocation is allowed by default but not combined with other high-risk flags.
What to consider before installing
This skill appears to do what it says (fetch patent PDF links from LinkFox/Zhihuiya) but the package metadata omits a required API key (LINKFOXAGENT_API_KEY) that the bundled script and API docs expect. Before installing, verify the LinkFox endpoints and the skill owner, and ask the author to update the manifest to declare the required environment variable. Only provide the API key if you trust the service and understand that the skill will make network requests to tool-gateway.linkfox.com (data) and skill-api.linkfox.com (feedback). If you need stronger guarantees, request a homepage, publisher identity, or more details about how the API key is issued and scoped.

Like a lobster shell, security has layers — review code before you run it.

latestvk976ws7jttzbgpvzm0x3ptm901842txw

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

Zhihuiya Patent PDF Downloader

This skill guides you on how to retrieve patent PDF full-text download links from the Zhihuiya patent database, supporting lookup by patent ID or publication number.

Core Concepts

The Zhihuiya Patent PDF service provides direct download links to the full-text PDF documents of patents worldwide. You can query by patent ID or publication number (also called public announcement number), and retrieve up to 100 patents in a single request.

Lookup priority: When both patentId and patentNumber are supplied, the service uses patentId first. This is important to remember when both identifiers are available.

Family substitution: If a patent's own PDF is unavailable, the service can optionally return the PDF of a related family patent instead.

Parameter Guide

ParameterTypeRequiredDescription
patentIdstringConditionallyPatent ID(s). At least one of patentId or patentNumber must be provided. Separate multiple values with commas. Max 100 entries.
patentNumberstringConditionallyPublication/announcement number(s). At least one of patentId or patentNumber must be provided. Separate multiple values with commas. Max 100 entries.
replaceByRelatedstringNoWhether to substitute with a family patent PDF when the original is unavailable. 1 = yes, 0 = no. Defaults to no substitution.

How to Choose the Right Identifier

  • Patent ID (patentId): An internal numeric identifier within the Zhihuiya system. Use this when the user provides Zhihuiya-specific IDs.
  • Publication Number (patentNumber): The public-facing patent number (e.g., US20230012345A1, CN115000000A). Use this when the user provides standard patent numbers.

Response Fields

FieldDescription
totalNumber of records returned
dataArray of patent objects, each containing download information
data[].patentIdThe patent ID
data[].pnThe publication/announcement number
data[].pdfPathThe PDF full-text download URL
data[].pnRelatedPublication number of the substitute family patent (only present when family substitution is used)
costTokenTokens consumed by the request

API Usage

This tool calls the LinkFox tool gateway API. See references/api.md for calling conventions, request parameters, and response structure. You can also execute scripts/zhihuiya_pdf_data.py directly to run queries.

Usage Examples

1. Single Patent by Publication Number

Retrieve the PDF for patent publication number US20230012345A1.

Parameters: {"patentNumber": "US20230012345A1"}

2. Multiple Patents by Publication Number

Download PDFs for CN115000000A, CN115000001A, and CN115000002A.

Parameters: {"patentNumber": "CN115000000A,CN115000001A,CN115000002A"}

3. Single Patent by Patent ID

Get the full-text PDF for patent ID 12345678.

Parameters: {"patentId": "12345678"}

4. With Family Substitution Enabled

Download the PDF for EP4000000A1. If it is unavailable, use a family patent PDF instead.

Parameters: {"patentNumber": "EP4000000A1", "replaceByRelated": "1"}

5. Batch Download by Patent IDs

Retrieve PDFs for patent IDs 11111111, 22222222, 33333333.

Parameters: {"patentId": "11111111,22222222,33333333"}

Display Rules

  1. Present download links clearly: For each patent, show the publication number and its PDF download link in a clean table or list format.
  2. Highlight substitutions: If a PDF was provided via family patent substitution, explicitly note this and show the pnRelated value so the user knows which family patent was used.
  3. Batch results: When multiple patents are returned, present them in a table with columns: Publication Number, Patent ID, PDF Link, and Substitution Note (if applicable).
  4. Error handling: When a query fails or returns no results, explain the reason and suggest the user verify the patent ID or publication number. If replaceByRelated was not enabled, suggest enabling it as an alternative.
  5. No PDF available: If a patent entry is returned without a pdfPath, inform the user that the PDF is not available and suggest enabling family substitution.

Important Limitations

  • Batch limit: A maximum of 100 patents per request.
  • Identifier requirement: At least one of patentId or patentNumber must be provided; the request will fail if both are empty.
  • Priority rule: When both identifiers are provided, patentId takes precedence over patentNumber.
  • PDF availability: Not all patents have PDFs available. Use the replaceByRelated option to fall back to family patents.

User Expression & Scenario Quick Reference

Applicable -- Patent PDF document retrieval tasks:

User SaysScenario
"Download the PDF for patent XX"Single patent PDF retrieval
"Get full-text documents for these patents"Batch patent PDF download
"I need the PDF for publication number XX"Lookup by publication number
"Can I get the patent document even if it's not directly available"Family substitution scenario
"Batch export patent PDFs"Multi-patent batch download

Not applicable -- Needs beyond patent PDF retrieval:

  • Patent search or discovery (finding patents by keyword, assignee, etc.)
  • Patent citation or legal status analysis
  • Patent claim interpretation or translation
  • Patent portfolio analytics or landscape mapping

Feedback:

Auto-detect and report feedback via the Feedback API when any of the following apply:

  1. The functionality or purpose described in this skill does not match actual behavior
  2. The skill's results do not match the user's intent
  3. The user expresses dissatisfaction or praise about this skill
  4. Anything you believe could be improved

Call the feedback API as specified in references/api.md. Do not interrupt the user's flow.


For more high-quality, professional cross-border e-commerce skills, set LinkFox Skills.

Files

3 total
Select a file
Select a file to preview.

Comments

Loading comments…