zotero-openclaw

将论文保存到 Zotero 文库，请按照 userid:apiKey 的格式配置 ZOTERO_CREDENTIALS 环境变量。

This skill appears to do what it says: it uses the ZOTERO_CREDENTIALS you provide to add items (and optionally attach PDFs downloaded from arXiv) to your Zotero library. Before installing or using it: (1) treat your ZOTERO_CREDENTIALS like a secret — use a Zotero API key with the minimum needed scope (if possible) rather than a full master key; (2) review the script yourself (it is short and included) if you have any doubts; (3) be aware the agent can be invoked to run this skill and will then perform writes to your Zotero account; and (4) when supplying URLs ensure they are trustworthy (the script will download PDFs from the provided URL). If you want extra safety, create a limited-scope Zotero API key or run the script manually rather than allowing autonomous agent invocation.

Type: OpenClaw Skill Name: zotero-openclaw Version: 1.0.0 The skill is a legitimate utility designed to save academic paper metadata and PDFs to a user's Zotero library. The Python script `scripts/save_paper.py` uses the official `pyzotero` library to interact with the Zotero API and includes logic to download PDFs from Arxiv. No evidence of data exfiltration, credential theft, or malicious execution was found; the use of environment variables for API keys is consistent with the stated purpose.