知网高级检索

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This skill is a coherent CNKI search-and-export automation helper, but it will control a browser and download or create result files.

Before installing, make sure you are comfortable with the agent controlling a browser on CNKI, exporting records, and saving files to Downloads. Confirm the keyword groups and export limits, and require explicit approval before any Python-based fallback is used.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may perform searches, sorting, selection, export, and downloads on CNKI on the user's behalf.

Why it was flagged

The skill directs browser automation on CNKI and can select/export many records. This is aligned with the stated research-export purpose and is bounded, but users should understand that the agent will act on an external website.

Skill content
使用Chrome DevTools MCP工具在知网高级检索页面自动执行检索操作...找到"全选"复选框...最多导出前100篇
Recommendation

Confirm the keyword expansion, export count, and that the intended CNKI use is allowed before running the automation.

What this means

If the fallback is used, the agent may run local Python and create a spreadsheet file.

Why it was flagged

The instructions mention using Python to generate an Excel file as a fallback. That is related to producing search results, but it implies local code/tool execution not reflected in the install metadata.

Skill content
若导出功能受限(如需要登录、付费等),回退到snapshot逐条读取并用Python生成Excel
Recommendation

Ask the agent to explain or show any Python fallback before running it, and approve the output path and file contents.