Academic Research Skip
v1.0.1Search academic papers and conduct literature reviews using OpenAlex API (free, no key needed). Use when the user needs to find scholarly papers by topic/aut...
⭐ 0· 90·1 current·1 all-time
by@mmyg11
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The scripts and SKILL.md implement OpenAlex-based search and a literature-review pipeline as advertised. Minor inconsistencies: the package/registry metadata claims 'instruction-only' with no install spec, but this bundle includes Python scripts that require the 'requests' library and a Python runtime. That missing dependency declaration is a bookkeeping issue but does not change the skill's purpose.
Instruction Scope
Runtime instructions and the Python code only perform searches against api.openalex.org and (optionally) api.unpaywall.org, parse results, cluster themes, and write a local cache under /tmp/litreview_cache. The code does not read other system files, environment variables, or call arbitrary external endpoints beyond OpenAlex/Unpaywall. It also does not exfiltrate secrets or request unrelated data.
Install Mechanism
No install spec is provided (lowest-risk install model). However, the shipped scripts require Python and the third-party 'requests' package; these requirements are not declared in the manifest. This is an operational omission (user/agent must have Python + requests available) rather than an active security risk.
Credentials
The skill requests no environment variables or credentials. The only notable constant is a built-in MAILTO (topanga@ludwitt.com) used as a polite parameter to OpenAlex/Unpaywall; this means queries will include that email but does not expose any user secrets or require tokens.
Persistence & Privilege
always is false and the skill does not request persistent privileged presence. It writes cache files to /tmp/litreview_cache (local, non-privileged) and does not modify other skills or system-wide settings.
Assessment
This skill appears to do what it says: run Python scripts that query OpenAlex (and optionally Unpaywall) and produce literature-review output. Before installing, ensure you have a Python runtime and the 'requests' library available (the manifest doesn't declare this dependency). Note the scripts will perform outbound network requests and include the hard-coded email (topanga@ludwitt.com) as the 'mailto' parameter to third-party APIs; if you prefer not to surface your queries with that contact, inspect/modify the MAILTO value in the scripts. The tool caches results under /tmp/litreview_cache — review or clear that cache if it will contain sensitive query info. Run the scripts in an isolated environment if you want to limit network or file access. Overall there are no requests for credentials or unexpected endpoints, and the functionality matches the description.Like a lobster shell, security has layers — review code before you run it.
latestvk97agf4bbpqmazm5xtjnczx5hx839jx4
License
MIT-0
Free to use, modify, and redistribute. No attribution required.