Source Trace Builder

为分析稿建立引用索引和原始出处映射，区分一手与二手来源。；use for sources, citations, research workflows；do not use for 编造文献出处, 替代正式文献管理软件.

This skill appears coherent and local-only, but take these precautions before running: - Review scripts/run.py yourself (it's included) to confirm behavior matches your expectations. The code is readable and uses only standard library operations. - When testing, run in a safe/isolated directory and use --dry-run or supply a specific input file rather than a broad path (do not point --input at your home directory or repositories with secrets). - Use the provided tests/smoke-test.md to validate outputs before feeding sensitive documents. - If you plan to let an agent execute the script autonomously, restrict the input paths the agent may use to avoid unintended disclosure of unrelated files. - If you need network-enriched verification of sources, note this skill intentionally avoids external lookups; that behavior is by design but may limit verification quality.

Type: OpenClaw Skill Name: source-trace-builder Version: 1.0.0 The 'source-trace-builder' skill is a legitimate tool designed for citation management and research traceability. The core logic in 'scripts/run.py' includes utility functions for scanning directories and files to generate structured reports, including a 'pattern_audit' mode that identifies (and masks) potential secrets or dangerous shell commands in the input data. The SKILL.md instructions are safety-conscious, explicitly directing the agent not to fabricate information and to provide reviewable drafts before any execution. No evidence of data exfiltration, unauthorized persistence, or malicious prompt injection was found.