Academic Mentor
v1.0.0AI-powered research advisor for graduate students - provides research assessment, proposal generation, literature analysis, advisor matching, and publication...
⭐ 1· 838·3 current·3 all-time
byJustin Liu@zhenstaff
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
high confidencePurpose & Capability
The README and SKILL.md describe a full Python library (academic_mentor), PDF parsing, advisor databases, and external API integrations, yet the published bundle contains only SKILL.md and README.md (no Python package files, no data/JSON files). The metadata in SKILL.md suggests running 'pip install -e .' and shows a project structure that does not exist in the package — the claimed capabilities cannot be delivered by the files actually provided.
Instruction Scope
Runtime instructions are primarily conversational and include Python usage examples that import and call an AcademicMentor class. They also instruct installing system PDF tools and editing local data files. The instructions do not request unrelated system secrets or unusual file reads, but they assume local code and data that are not present in the bundle and could prompt a user/agent to run install commands or manipulate local files.
Install Mechanism
There is no formal install spec in the registry entry (the skill is instruction-only), but the SKILL.md metadata and README recommend 'pip install -e .' and system package installs (tesseract, poppler, ghostscript). That is inconsistent with the absence of package source files. Asking a user to run pip install for a package that isn't included (or to run arbitrary system installs) is risky and incoherent with the distributed contents.
Credentials
The skill declares no required environment variables or credentials, which is reasonable for a purely local advisor. However, the docs mention planned integrations with Semantic Scholar, arXiv, PubMed, and other academic databases and say 'requires API setup' — yet no env vars or guidance for API keys are declared in the package. This mismatch is worth clarifying before providing any credentials.
Persistence & Privilege
The skill does not request persistence or special privileges: always is false, no config paths or required credentials are declared, and there is no evidence it would modify other skills or system-wide agent settings.
What to consider before installing
Do not run pip install commands or system package installs based solely on these docs. The bundle you received only contains documentation; the Python package and data the skill advertises are missing. Before installing or executing anything, ask the publisher for the missing source files (the academic_mentor package and data/ JSON), a clear install spec, and an explanation of any external APIs it needs (and what env vars/tokens those require). If you must test functionality, do so in an isolated environment (VM or container) and avoid providing API keys or running pip installs from unknown local paths/URLs. If the maintainer points to a GitHub repo, verify that the code there matches what you were provided and inspect it before installing.Like a lobster shell, security has layers — review code before you run it.
latestvk9762abt7hfa7y4tv3zyx0ttdh82cfr2
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎓 Clawdis
OSmacOS · Linux · Windows
Binspython3