Peer Reviewer

AI-powered academic paper reviewer. Uses a multi-agent system (Deconstructor, Devil's Advocate, Judge) to analyze papers for logical flaws, contradictions, and empirical validity.

What to check before installing/use: - Do not assume 'no required env vars' from registry metadata: the code uses several credentials (OpenAI/Gemini/Google Serper). Confirm which keys you must provide and why. If you don't want network calls, do not set API keys. - Protect any google.json or service-account file — it contains powerful service account keys. If you provide GOOGLE_APPLICATION_CREDENTIALS or a google.json file, the skill will use it to call Vertex/Google APIs. - The skill will send your paper text to external services (OpenAI/Gemini/Vertex/Serper/ArXiv). If your manuscript is sensitive or unpublished, this may be data leakage — consider redaction, running offline, or not providing API keys. - SKILL.md references an absolute local development path (/Users/sschepis/...). That indicates documentation was not adapted for distribution; double-check paths before running to avoid accidentally reading/writing unintended files. Run the tool from an isolated directory or container and inspect the code locally first. - The skill may execute an external CLI (serper-tool) via child_process. If you enable that path, verify the serper-tool binary is trustworthy and understand what it does. - Recommended mitigations: run inside a sandbox or VM, inspect package.json and all source before running, avoid providing high-privilege credentials, or create a least-privilege service account for Google usage. Ask the author to update registry metadata to list required env vars and to remove hard-coded local paths in SKILL.md. If you cannot vet the author/packaging, treat the skill as untrusted and avoid running it on sensitive documents.

Type: OpenClaw Skill Name: peer-reviewer Version: 1.0.0 The skill is classified as suspicious due to its broad file system access and the use of external command execution. The `src/index.ts` file allows reading of arbitrary local files if a path is provided as an argument to the CLI (`fs.readFileSync`). More critically, the `src/adapters/skill_search.ts` adapter uses `child_process.exec` to run an external `serper-tool` command, and `src/index.ts` explicitly attempts to execute a Node.js script from a relative parent directory (`../../serper-tool/dist/index.js`). While these capabilities are presented as part of the skill's intended functionality (reviewing papers, performing searches), they introduce significant supply chain risks and the potential for local arbitrary code execution if the external tool or its path is compromised. There is no clear evidence of intentional malicious behavior within this specific skill bundle, but the high-risk capabilities warrant a 'suspicious' classification.