ClawHub
Back to skill

Security audit

CNKI Scholar

Security checks across malware telemetry and agentic risk

Overview

This is an instruction-only academic search helper that discloses its use of public scholarly APIs and shows no hidden persistence, credential access, or destructive behavior.

Reasonable to install for public academic search and citation formatting. Avoid sending confidential research topics or private identifiers through the provided API examples, and treat CNKI-specific claims as limited because the skill does not directly access CNKI or institutional subscriptions.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (4)

External Transmission

Medium
Category
Data Exfiltration
Content
使用OpenAlex API搜索：

```bash
curl -s "https://api.openalex.org/works?search=YOUR_QUERY&per_page=10"
```

支持的筛选参数：
Confidence
88% confidence
Finding
https://api.openalex.org/

External Transmission

Medium
Category
Data Exfiltration
Content
local limit="${2:-10}"
    local year_filter="${3:-}"
    
    local url="https://api.openalex.org/works?search=${query}&per_page=${limit}"
    
    if [ -n "$year_filter" ]; then
        url="${url}&filter=publication_year:${year_filter}"
Confidence
92% confidence
Finding
https://api.openalex.org/

External Transmission

Medium
Category
Data Exfiltration
Content
```bash
get_paper_by_doi() {
    local doi="$1"
    curl -s "https://api.openalex.org/works/doi:${doi}"
}
```
Confidence
89% confidence
Finding
https://api.openalex.org/

External Transmission

Medium
Category
Data Exfiltration
Content
```bash
generate_apa() {
    local doi="$1"
    curl -s "https://api.openalex.org/works/doi:${doi}" | python3 -c "
import json, sys
w = json.load(sys.stdin)
authors = []
Confidence
89% confidence
Finding
https://api.openalex.org/

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.