Research Tools Skill

科研工具包 - 包含文献搜索、数据分析、代码开发等科研常用工具

Security Scan

The skill's stated purpose (research tooling) mostly matches its instructions, but the runtime commands (arbitrary exec, web_fetch of arbitrary URLs, and an opaque sessions_spawn runtime) give the agent broad capability to run code and access external endpoints — review before installing.

Purpose & Capability

Name/description (文献搜索、数据分析、代码开发) aligns with the declared binary requirements (python, node, git). Requesting python and git is reasonable; node is plausible for some tooling though not clearly justified in SKILL.md but not disproportionate.

Instruction Scope

SKILL.md instructs the agent to run web_search/web_fetch against arbitrary URLs and to exec arbitrary Python commands (python -c '...'), which is expected for a research tool but also allows arbitrary code execution and retrieval of arbitrary external content. The sessions_spawn runtime:"acp" command is opaque — it appears to create/spawn a runtime/session (potentially remote) and is not explained in the README, increasing the risk of unexpected network activity or data transfer.

Install Mechanism

Instruction-only skill with no install spec or downloads; lowest install risk because nothing is written to disk by the skill package itself.

Credentials

No environment variables or credentials requested. The lack of secrets is proportionate to the described capabilities.

Persistence & Privilege

always:false and normal autonomous invocation (disable-model-invocation:false). No requests to modify other skills or system-wide configs. Autonomous invocation is expected; not combined with other high-privilege requests.

What to consider before installing

This skill is broadly consistent with a 'research toolkit' but grants the agent the ability to run arbitrary code and fetch arbitrary URLs. Before installing, confirm: (1) what the platform's web_search/web_fetch and sessions_spawn tools actually do and which external endpoints they contact; (2) whether running arbitrary python -c is allowed on your agent runtime and whether it can access sensitive files; (3) that you trust the agent's autonomy for these actions. If you need stricter controls, block or audit outgoing network calls, restrict sessions_spawn runtimes, and prevent running unreviewed exec commands with access to private data.

科研工具包 (Research Tools)

专为科研工作者设计的工具集合，支持文献搜索、数据分析、代码开发等功能。

核心功能

📚 文献搜索与获取

• 学术搜索引擎集成
• 文献摘要提取
• 全文内容分析

📊 数据分析

• 数据可视化
• 统计分析
• 机器学习建模

💻 代码开发

• 科研代码编写
• 数据处理脚本
• 模型训练代码

使用方法

文献搜索

# 搜索特定主题的文献
web_search query:"your research topic" count:10 freshness:"month"

# 获取文献全文
web_fetch url:"https://arxiv.org/abs/your-paper"

数据分析

# 使用 Python 进行数据分析
exec command:"python -c 'import pandas as pd; import matplotlib.pyplot as plt; # your analysis code'"

代码开发

# 创建科研项目
sessions_spawn runtime:"acp" task:"Create a research project structure for [your topic]"

科研工作流

1. 文献调研 - 搜索相关文献
2. 内容分析 - 总结文献要点
3. 方法复现 - 实现文献中的方法
4. 实验设计 - 设计新的实验方案
5. 结果分析 - 分析实验结果

支持的研究领域

• 计算机科学
• 人工智能
• 生物医学
• 物理化学
• 工程科学
• 社会科学