Academic Social Publisher
v1.0.0Generate platform-optimized academic content from papers for ResearchGate, LinkedIn, and WeChat. Activated when Chopin shares a paper/article and wants to cr...
⭐ 0· 41·0 current·0 all-time
byChopin@shaopanguo
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the instructions: the skill converts paper metadata into posts for ResearchGate, LinkedIn, WeChat and always produces a video narration script. No unexplained credentials, binaries, or unrelated capabilities are required for its core function.
Instruction Scope
Instructions stay on-topic (parse paper metadata, produce platform-specific text and an optional video script). They do mention optional calls to third-party video/TTS services (HeyGen, Runway, Pika, Kling, ElevenLabs) and use of ffmpeg in a full pipeline; those are optional and only used if the user configures an API key. The SKILL.md does not instruct the agent to read unrelated files or environment variables, nor to auto-post to external accounts (it only generates content).
Install Mechanism
No install spec and no code files — instruction-only — so nothing will be written to disk or downloaded by default.
Credentials
The registry declares no required env vars or primary credential. The SKILL.md documents optional API keys for third-party video/TTS services if the user opts into video production. That is proportionate, but these API keys are sensitive and the README does not specify how/where keys are stored or scoped.
Persistence & Privilege
always is false and the skill does not request persistent elevated privileges or modify other skills or system-wide configs. Autonomous invocation remains enabled by default (platform normal), but nothing in the skill grants it extra persistent power.
Assessment
This skill appears coherent and low-risk when used for text generation only. Before enabling optional video production, consider: 1) Only provide API keys for services you trust and limit their scope; confirm where the skill stores those keys (agent config vs. remote storage) and be prepared to revoke them if needed. 2) The full video pipeline references ffmpeg and third-party video/TTS APIs — ensure those tools are installed locally or that you intend to use remote APIs. 3) The skill generates content but does not, in its instructions, automatically post to external accounts; if you later integrate automated posting, review and restrict posting permissions. If you want higher assurance, ask the skill author to document exact storage and transmission behavior for any API keys and the exact commands used for video composition.Like a lobster shell, security has layers — review code before you run it.
latestvk974zyetm2pcgy1txzrn9qr0rd840dm2
License
MIT-0
Free to use, modify, and redistribute. No attribution required.