Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Paper Generator

v0.1.0

Automatically generate complete academic papers in Chinese or English from experimental code, supporting LaTeX templates and PDF conversion.

0· 46·1 current·1 all-time
bylaojun@laojun509
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Suspicious
high confidence
!
Purpose & Capability
The skill advertises generating full academic papers from experimental code, multi-template LaTeX support, and PDF conversion. The bundled paper-gen.py only writes a title and a placeholder abstract and ignores experiment data, template structure, references, and PDF output. No tooling (pandoc/pdflatex) or integration with experiment artifacts is requested or implemented.
!
Instruction Scope
SKILL.md instructs use of commands 'paper-gen' and 'paper-to-pdf' and shows examples for generating papers from experiments, but the instructions do not match the implementation: there is no 'paper-to-pdf' command provided, and paper-gen.py accepts no experiment input or data paths. The instructions overclaim capabilities and grant the agent broad discretion ('generate complete papers from experiment code') without specifying how experiment data is supplied.
Install Mechanism
There is no install spec and no external downloads; the skill is instruction-only with a single local Python script. This minimizes install-time risk. The code is small, readable, and contains no network calls or obfuscated code.
Credentials
The skill requests no environment variables, credentials, or config paths. That is proportionate given the implementation. There is no evidence it would attempt to access unrelated secrets or system configuration.
Persistence & Privilege
always is false and the skill does not request persistent or elevated privileges. It does not modify other skills or system configuration in the provided files.
What to consider before installing
This skill overpromises: SKILL.md and the description claim LaTeX template support, PDF conversion, and generating papers from experiment outputs, but the included script is only a stub that writes a title and placeholder abstract. Before installing or relying on this skill, inspect and test locally in a safe environment: 1) verify where 'paper-to-pdf' is supposed to come from (pandoc/pdflatex or an included converter) and whether those dependencies are required; 2) confirm how experiment data should be supplied (the current script has no option for input data); 3) if you need full functionality, ask the author for an implementation that renders templates, processes experiment files, and produces PDFs, or extend the script yourself; 4) avoid running code from unknown sources with elevated privileges and consider running it in a sandbox/container. The current files show no network activity or credential access, so the main risk is functional misrepresentation rather than data exfiltration. If you want, I can list the exact code changes needed to add experiment-input handling, template rendering, and PDF conversion.

Like a lobster shell, security has layers — review code before you run it.

latestvk97325k3ja0ezpbmkv8fbg9k9x84g7p7

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments