ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

My PubMed Search

v1.0.0

简易PubMed搜索技能。使用web搜索和API调用检索PubMed文献。当用户要求"搜索PubMed文献"、"查找医学论文"、"医学文献检索"时使用。

⭐ 0· 77·0 current·0 all-time
by@hollyya

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for hollyya/my-pubmed-skill.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "My PubMed Search" (hollyya/my-pubmed-skill) from ClawHub.
Skill page: https://clawhub.ai/hollyya/my-pubmed-skill
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install my-pubmed-skill

ClawHub CLI

Package manager switcher

npx clawhub@latest install my-pubmed-skill
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
ℹ
Purpose & Capability
The name/description (PubMed search) matches the included code and templates: the Python script calls NCBI E-Utilities and templates/reference docs are PubMed-relevant. Nothing in the code requests unrelated cloud credentials or unusual system access.
!
Instruction Scope
SKILL.md instructs the agent to run PowerShell scripts (scripts/pubmed_search.ps1, scripts/test_pubmed_api.ps1) and to use OpenClaw web_search/web_fetch tools, but those PowerShell files are not present in the package and the only provided script is scripts/pubmed_search.py. This mismatch could cause the agent to fail or attempt other remediation (download/execute missing files) and indicates the instructions are out-of-sync with the shipped implementation. SKILL.md also references using an API key but does not specify how the agent should obtain or store it.
✓
Install Mechanism
No install spec is included (instruction-only plus code file). That is low-risk: nothing is downloaded or installed by the registry. The shipped Python script has no obfuscated code or external download endpoints. Note: the script uses the 'requests' package which may not be present in all runtimes and would fail unless available.
✓
Credentials
The skill declares no required environment variables or credentials. The code accepts an optional NCBI api_key and an email address but does not read unspecified secrets. There is no request for unrelated tokens or system config paths.
✓
Persistence & Privilege
The skill does not request always:true and is user-invocable. It does not appear to modify other skills or system-wide settings. Autonomous invocation is allowed (platform default) but not combined with broad credentials or other red flags here.
What to consider before installing
Do not install blindly. The main issue is that SKILL.md tells the agent to run PowerShell scripts and to use OpenClaw web_search/web_fetch, but the package only contains a Python script (scripts/pubmed_search.py). Before installing or enabling this skill: 1) Confirm with the author whether the missing PowerShell scripts are intentional or a packaging error; 2) If you plan to run it, inspect/execute the included Python script locally in a sandbox to verify behavior and dependencies (requests); 3) Check how an API key would be provided — prefer passing it explicitly (not hardcoded) or via a well-scoped secret managed by you; 4) Be cautious if the agent attempts to download or execute missing scripts automatically — that would increase risk. If you need platform portability, ask the maintainer for a consistent, up-to-date SKILL.md matching the shipped files.

Like a lobster shell, security has layers — review code before you run it.

latestvk977hvg52ry95k9tc40sh5gnz984cwxf
77downloads
0stars
1versions
Updated 2w ago
v1.0.0
MIT-0
@hollyya
latest
Download

My PubMed Search Skill

一个简易的PubMed文献搜索技能，使用多种方法检索PubMed文献。

核心功能

1. Web搜索

  • 使用OpenClaw的web_search/web_fetch工具搜索PubMed网站
  • 适用于快速浏览和简单搜索

2. API调用

  • 使用NCBI E-Utilities API进行结构化检索
  • 支持批量获取文献详情
  • 支持多种引用格式导出

3. 搜索参数

  • 时间范围: 近一年/近三年/近五年/自定义
  • 文章类型: Review/Clinical Trial/Meta-Analysis等
  • 语言: English/Chinese/Japanese
  • 可用全文: Free Full Text/Full Text/Abstract

4. 引用格式

  • APA
  • MLA
  • IEEE
  • GB/T 7714
  • BibTeX

使用流程

第一步：明确需求

询问用户：

  • 研究主题/关键词
  • 时间范围（近一年/近三年/不限）
  • 需要的结果数量
  • 引用格式偏好

第二步：执行搜索

根据需求选择方法：

  1. 简单搜索 - 使用web_fetch抓取PubMed搜索结果
  2. API搜索 - 运行PowerShell脚本调用PubMed API 
    powershell -File scripts/pubmed_search.ps1 "关键词" 10 apa

第三步：处理结果

提取以下信息：

  • 论文标题
  • 作者列表
  • 发表年份
  • PubMed ID (PMID)
  • 摘要
  • 期刊名称
  • DOI

第四步：格式化输出

使用模板格式化结果：

  • 表格格式 (templates/results-table.md)
  • 引用格式 (templates/citation-format.md)
  • 搜索选项 (templates/search-options.md)

脚本使用

基本搜索

# 搜索PubMed文献
powershell -File scripts/pubmed_search.ps1 "machine learning" 10 apa

参数说明

参数说明默认值
第1个搜索关键词(必填)
第2个结果数量5
第3个引用格式apa

引用格式

  • apa - APA格式
  • mla - MLA格式
  • ieee - IEEE格式
  • gbt7714 - GB/T 7714格式

脚本文件

  • scripts/pubmed_search.ps1 - 主搜索脚本
  • scripts/test_pubmed_api.ps1 - API测试脚本

模板文件

  • templates/results-table.md - 表格格式输出模板
  • templates/citation-format.md - 引用格式模板
  • templates/search-options.md - 搜索参数模板

参考资料

  • references/pubmed-api.md - PubMed API使用指南

注意事项

  1. PubMed API有访问限制（3次/秒，有API key时10次/秒）
  2. 重要文献建议用户前往原文核实
  3. 搜索结果仅供参考，需结合专业判断
  4. 使用API key可提高速率限制

Comments

Loading comments...