← Back to Skills Marketplace
jmanhype

Denario (Autonomous Research Pipeline)

by jmanhype · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
1829
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install denario-skill
Description
Automates scientific research by generating ideas, methodology, results, papers, and citations using the Denario framework with Z.ai integration.
README (SKILL.md)

Denario Skill

Wraps the Denario framework to automate the scientific research process. Handles environment setup and Z.ai integration automatically.

Engine: scripts/wrapper.sh Working Directory: ./ (Skill Root)


Trigger Phrases

Phrase Action
"Denario idea" Generate research ideas (Maker/Hater loop).
"Denario methods" Develop methodology.
"Denario results" Generate results and analysis.
"Denario paper" Compile full paper.
"Denario citations" Manage citations.

Usage Guide

1. Generating an Idea

User: "Denario idea" Bot: Runs the wrapper script to execute test_denario.py. First run will auto-install dependencies.

2. Full Pipeline

User: "Denario methods", then "Denario results", then "Denario paper" Bot: Progresses through the research stages.


Configuration

API Key Required: You must set your Z.ai/Zhipu API key in Clawdbot's environment:

clawdbot config set env.OPENAI_API_KEY \x3Cyour-key>

Environment: Creates and manages a virtualenv at ~/.denario_skill_env automatically.

Usage Guidance
Do not install blindly. Key points to consider before running: (1) The skill expects you to set OPENAI_API_KEY but the registry didn't declare it — confirm whether you should supply an OpenAI key or a Z.ai/Zhipu key; by default the scripts set OPENAI_BASE_URL to https://open.bigmodel.cn so your key would be used with that host. If you don't want your personal API key sent to a third party, do not run this skill until the base URL is changed. (2) test_citations.py contains a hardcoded PERPLEXITY_API_KEY — remove that or ask the author why it's embedded; it may be a leaked/shared credential. (3) The wrapper will create a virtualenv in your home (~/.denario_skill_env) and pip install packages — consider running in an isolated machine or disposable account if you want to test. (4) Review the scripts locally (they are included) and adjust OPENAI_BASE_URL and any hardcoded keys before running. (5) If you want to proceed, prefer using a dedicated API key with limited quota and monitor outbound requests; otherwise reject or request the maintainer to: declare required env vars, remove embedded keys, and make the target LLM host configurable and documented.
Capability Analysis
Type: OpenClaw Skill Name: denario-skill Version: 1.0.0 The skill is classified as suspicious primarily due to a hardcoded `PERPLEXITY_API_KEY` found in `scripts/test_citations.py`, which exposes a secret. Additionally, the Python scripts (`scripts/test_citations.py`, `scripts/test_paper.py`) modify the `PATH` environment variable to include a custom TinyTeX path, a risky capability, even if plausibly for LaTeX compilation. While there's no clear evidence of intentional malicious behavior targeting the user or platform (like user credential theft or backdoor installation), these practices represent significant security risks and poor security hygiene.
Capability Assessment
Purpose & Capability
The skill claims to run the Denario research pipeline, which explains running Python scripts and installing denario. However the registry metadata lists no required env vars while SKILL.md and the scripts require OPENAI_API_KEY (for Z.ai/Zhipu) and set OPENAI_BASE_URL to a third‑party endpoint. That mismatch (declared requirements vs runtime requirements) is incoherent and could confuse users about which credential to provide.
Instruction Scope
Runtime instructions execute scripts via scripts/wrapper.sh which: create a virtualenv in the user home (~/.denario_skill_env), pip install denario and langchain-openai, set OPENAI_BASE_URL to https://open.bigmodel.cn, monkey-patch langchain_openai behavior, modify PATH for TinyTeX, and run user-facing scripts that write into ./denario_output. test_citations.py also injects a PERPLEXITY_API_KEY literal. The scripts therefore read/write home directories, change environment variables, and direct LLM traffic to an external host — behaviors beyond a simple helper and not declared in registry.
Install Mechanism
There is no formal install spec in the registry, but the wrapper script bootstraps a virtualenv and runs pip install to fetch denario and langchain-openai from PyPI at runtime. This is a common approach but means arbitrary Python packages will be installed/executed in your account when the skill runs.
Credentials
The registry claims no required environment variables, yet SKILL.md and the scripts require OPENAI_API_KEY. The scripts also unconditionally set OPENAI_BASE_URL to a third‑party endpoint (open.bigmodel.cn) — meaning a supplied OPENAI_API_KEY would be used against that host. Additionally, test_citations.py sets a hardcoded PERPLEXITY_API_KEY value inside the repo, which is unusual and suspicious (embedded credential). Requesting/using an API key is reasonable for an LLM-backed pipeline, but the incongruence and the presence of a hardcoded third‑party key are disproportionate and risky.
Persistence & Privilege
The skill does not request forced persistence (always:false) and does not alter other skills. It does create a persistent virtualenv at ~/.denario_skill_env and writes project output to ./denario_output (or per SETUP.md, ~/denario_test); this has persistent side effects on the user's home directory which users should expect and approve.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install denario-skill
  3. After installation, invoke the skill by name or use /denario-skill
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release—wraps Denario framework to automate scientific research workflows. - Supports trigger phrases for idea generation, methodology, results, paper compilation, and citation management. - Automates environment setup and Z.ai integration. - Provides clear usage guide and configuration instructions for API key and environment management.
Metadata
Slug denario-skill
Version 1.0.0
License
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Denario (Autonomous Research Pipeline)?

Automates scientific research by generating ideas, methodology, results, papers, and citations using the Denario framework with Z.ai integration. It is an AI Agent Skill for Claude Code / OpenClaw, with 1829 downloads so far.

How do I install Denario (Autonomous Research Pipeline)?

Run "/install denario-skill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Denario (Autonomous Research Pipeline) free?

Yes, Denario (Autonomous Research Pipeline) is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Denario (Autonomous Research Pipeline) support?

Denario (Autonomous Research Pipeline) is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Denario (Autonomous Research Pipeline)?

It is built and maintained by jmanhype (@jmanhype); the current version is v1.0.0.

💬 Comments