PMC Harvest

Fetch and retrieve full-text or abstracts of open-access articles from PubMed Central by journal, year, or PMCID using NCBI's public APIs without an API key.

This skill appears to do exactly what it claims: search PMC and fetch open-access full-text via NCBI's public APIs. Before installing, ensure you have Node available and that your environment allows outbound HTTPS to ncbi.nlm.nih.gov. If you plan large-scale harvesting, respect NCBI rate limits and usage policies (the code implements a 3 req/sec delay but large batches should be staggered and run off-peak). In an enterprise environment, verify network egress policies because the scripts will make direct HTTP(S) requests to NCBI. If you need stronger guarantees, review the included source files yourself — they are small, readable, and contain no obfuscated or third-party endpoints.

Type: OpenClaw Skill Name: pmc-harvest Version: 1.0.0 The OpenClaw skill 'pmc-harvest' is designed to fetch articles from PubMed Central using official NCBI APIs. All network requests are directed to `eutils.ncbi.nlm.nih.gov` and `pmc.ncbi.nlm.nih.gov`, as documented in `SKILL.md` and implemented in `lib/api.js`. User inputs are handled as query parameters or IDs, which are properly URL-encoded or parsed, preventing arbitrary command or URL injection. The `SKILL.md` file contains no prompt injection attempts against the agent. The code demonstrates responsible API usage, including rate limiting, and lacks any indicators of malicious intent such as data exfiltration, unauthorized execution, or persistence mechanisms.