ClawHub

Citation Injector

v1.0.0

Apply a `citation-diversifier` budget report by injecting *in-scope* citations into an existing draft (NO NEW FACTS), so the run passes the global unique-cit...

⭐ 0· 89·1 current·1 all-time
by@willoscar
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (inject in-scope citations per a budget report) lines up with what is required and performed: the SKILL.md and scripts operate on workspace files (output/DRAFT.md, output/CITATION_BUDGET_REPORT.md, outline/outline.yml, citations/ref.bib). No unrelated credentials, binaries, or external services are requested.
✓
Instruction Scope
Runtime instructions and the bundled scripts read and write files within the declared workspace paths and implement the described constraints (only use keys from citations/ref.bib, obey budget report, no new facts). The skill does not attempt to read unrelated system config or environment variables. It does make in-place edits to output/DRAFT.md (explicitly documented).
✓
Install Mechanism
No install spec provided (instruction-only + bundled Python scripts). Required runtime is python/python3 only — appropriate and proportionate for the included Python scripts. Nothing is downloaded or extracted from external URLs.
✓
Credentials
The skill requests no environment variables, no credentials, and only needs filesystem access to the workspace files it documents. The requested access is proportional to the stated task of local citation injection.
ℹ
Persistence & Privilege
The skill is not marked always:true and does not request elevated system privileges, but it performs in-place modifications to output/DRAFT.md and writes an output/CITATION_INJECTION_REPORT.md. This file-writing behavior is expected for the skill's purpose but is an important operational consideration (inspect or run in a sandbox/branch first).
Assessment
This skill appears coherent and implements only local edits with no network calls or credential requests. Before installing or running: 1) Inspect the injection report output and back up output/DRAFT.md (the tooling includes atomic write/backup helpers but make an independent copy). 2) Verify citations/ref.bib contains every key you expect to be injected — the script will only inject keys present there. 3) If you run this as part of a pipeline, note that citation-injector is intended to run automatically in the C5 draft stage and will modify files in the workspace; run it first on a disposable workspace or branch until you are satisfied with the edits. 4) If you want extra safety, run the included script with a workspace copy and review output/CITATION_INJECTION_REPORT.md and the diff for output/DRAFT.md before accepting changes.

Like a lobster shell, security has layers — review code before you run it.

latestvk975aw2qp555c0ddg5ahqcx1px8370q2

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

Any binpython3, python

Comments