Patent Writer

中文专利交底书撰写助手。支持两种模式：(1) 方向模式：用户给出技术方向，自动搜索并推荐创新点供选择；(2) 明确想法模式：用户已有明确发明构思，直接进入撰写流程。触发词：写专利、专利撰写、专利交底书、发明点推荐、帮我写个专利。

This skill appears internally consistent with being a Chinese patent-drafting assistant. Before installing, consider: (1) Privacy of draft content — the skill uses external retrieval skills (arxiv, research-lit, web_search); confirm those skills' data handling before sending confidential invention details to them. (2) Pandoc availability — md2docx.sh calls pandoc, so ensure pandoc is installed if you need DOCX export. (3) Provenance — the package has no homepage and an unknown owner; if provenance or license matters, request source/author info. (4) Legal/IP risk — drafting patent claims is legally sensitive; have a qualified patent attorney review outputs. If you need higher assurance, inspect the referenced retrieval skills (arxiv, research-lit, web_search) and confirm they do not exfiltrate inputs beyond expected web queries.

Type: OpenClaw Skill Name: patent-writer Version: 1.1.0 The skill is a patent writing assistant that includes a shell script `scripts/md2docx.sh` containing a shell injection vulnerability due to the use of `eval` on unsanitized input variables ($INPUT_MD and $OUTPUT_DOCX). Additionally, `SKILL.md` references a hardcoded local user path (`/Users/zxw/`), which is unusual for a generic skill and suggests it was tailored for a specific environment. While these represent significant security flaws and poor development practices, there is no clear evidence of intentional malicious behavior such as data exfiltration or unauthorized remote control.