爬论文与人才触达工作流

AI/ML 人才搜索、论文作者发现、实验室成员爬取、GitHub 研究者挖掘与个性化招聘邮件生成 skill。只要用户提到查找 AI/ML PhD、研究员、工程师，抓取实验室成员、OpenReview/CVF 会议作者、GitHub 网络研究者，提取主页/Scholar/GitHub/邮箱/研究方向，识别华人、分...

This skill contains full scraping scripts and explicit instructions to use OpenReview credentials, BrightData MCP tokens, and Feishu app_tokens to read and write user data, but the registry entry does not declare any required environment variables or permissions—this is a mismatch you should not ignore. Before installing or enabling it: 1) Require the author to declare exact env vars and scopes (OpenReview, BrightData, Feishu) and justify each; 2) Review and audit the scripts in a sandboxed environment (network-isolated VM) to confirm exactly what endpoints are called and what data is transmitted; 3) If you plan to connect Feishu or other production systems, use a limited-test account with minimal scopes and never reuse high-privilege tenant credentials; 4) Be aware the skill performs bulk email extraction and demographic ("华人") classification — verify legal/ethical compliance in your jurisdiction and organizational policy before using; 5) Prefer an explicit opt-in trigger (do not allow the skill to auto-run on vague matching intents) and require human approval before performing writes to external services. If the author cannot or will not clearly document required credentials and data flows, treat the skill as untrusted.

Type: OpenClaw Skill Name: mapping-skill Version: 2.0.1 The Mapping-Skill bundle is a comprehensive toolkit for AI/ML talent recruitment, researcher data aggregation, and automated outreach. It contains specialized Python scripts (e.g., `openreview_scraper.py`, `cvf_paper_scraper.py`, `github_network_scraper.py`) for scraping academic conferences, laboratory homepages, and GitHub networks. The skill includes utilities for handling anti-scraping measures, such as `cloudflare_email_decoder.py`, and integrates with Feishu (Lark) for data management. All instructions in `SKILL.md` and the extensive documentation in the `references/` directory are strictly aligned with the stated purpose of talent sourcing and recruitment. While the skill requires network access and handles API credentials (GitHub, OpenReview, Serper), its behavior is transparent, well-documented, and lacks any indicators of malicious intent or unauthorized data exfiltration.