unisound-paper-writing-assist
ReviewAudited by ClawScan on May 15, 2026.
Overview
The skill’s behavior is coherent with medical paper drafting, but users should know it sends their provided research notes and an API key to a disclosed external LLM endpoint.
Before installing, verify the publisher identity, use a dedicated API key, and only provide research notes that are approved for transmission to the hivoice LLM API. Do not include patient-identifying or confidential clinical information unless your organization permits it.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Clinical research notes or manuscript details entered into the input file will be transmitted to the provider API.
The script sends the constructed prompt, including the user’s paper notes and style hints, to a disclosed external LLM provider endpoint.
API_URL = "https://maas-api.hivoice.cn/v1/chat/completions" ... body = _http_post(API_URL, payload, {"Authorization": f"Bearer {appkey}"})Use only data you are allowed to send to that provider; remove patient identifiers or confidential details unless your organization has approved this endpoint.
Anyone with the app key may be able to make requests to the configured model service under that credential’s authority.
The skill requires a provider credential to call the medical LLM. This is expected for the integration, but it is sensitive access material.
`--appkey STRING`：**必填**。
Use a dedicated, revocable key with the minimum required scope, avoid sharing it, and rotate it if exposed.
The skill may be repackaged or have stale internal metadata, making publisher verification less clear.
The packaged metadata does not match the registry owner ID and slug shown for the evaluated skill, which is a provenance consistency issue even though the runtime behavior is otherwise coherent.
"ownerId": "kn76wejkeqxfc03j0rfxp2jaj982m7aa", "slug": "doctor.clinical-research.paper-writing-assist"
Confirm the publisher and package identity before relying on it in a clinical or institutional workflow.