← 返回 Skills 市场
114
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install neckr0ik-anne-library
功能描述
Automate downloading and DOI extraction for academic books and articles from multiple library databases with institutional login support.
安全使用建议
This package is internally inconsistent: the README claims auto-authentication and references modules that are not present, it asks you to set library credentials but the code does not use them, and it mixes Python Playwright instructions with a Node.js runtime executed via subprocess. Do not provide real institutional credentials to this skill. Ask the author (or the registry) for: (1) the missing files (auth.py, doi_extractor.py, config.json), (2) a clear install script that matches the actual runtime (either Python-only or Node-only), and (3) explicit code that shows where and how credentials are read, stored, and transmitted. If you must test it, run it in an isolated environment (sandbox or VM), use throwaway/rotated credentials, and verify network traffic. If the author cannot justify and fix these mismatches, avoid installing or running this skill with sensitive credentials.
功能分析
Type: OpenClaw Skill
Name: neckr0ik-anne-library
Version: 1.0.0
The skill is classified as suspicious due to a code injection vulnerability in 'scripts/download.py', where the 'url' parameter is directly interpolated into a Node.js script executed via subprocess. Additionally, 'SKILL.md' encourages users to store sensitive institutional credentials in environment variables (e.g., ANNE_LIBRARY_PASS), yet the provided code is largely a placeholder and the actual authentication logic ('scripts/auth.py') is missing from the bundle, which is a significant red flag for a tool requesting such sensitive data.
能力评估
Purpose & Capability
The skill claims full automation for institutional authentication, DOI extraction, and platform-specific downloads, but the repository only contains a single download.py that largely prints suggestions and placeholders. SKILL.md also references additional modules (auth.py, doi_extractor.py, references/config.json) that are not present. claw.json lists dependencies for both Python and Playwright, indicating a mix of runtimes; this breadth is disproportionate to the actual implemented functionality.
Instruction Scope
SKILL.md instructs installing Python Playwright and running playwright install chromium, and shows environment variables for library credentials (ANNE_LIBRARY_USER/PASS). The actual script does not read those environment variables or implement authentication (it contains comments 'Would need credentials' and 'placeholder'). The code writes a temporary Node.js script and executes it via subprocess, which is not mentioned in SKILL.md. Instructions grant broad discretion (auto-authentication) while the code does not implement it.
Install Mechanism
There is no formal install spec in the registry (instruction-only), but SKILL.md recommends pip installing Playwright while claw.json lists dependencies without an install step. The code spawns and runs a Node.js script (requiring node + Node Playwright), but SKILL.md uses Python Playwright instructions—this mismatch between Python and Node runtime/dependency installation is a red flag and could cause users to install the wrong runtime or run code unexpectedly.
Credentials
SKILL.md instructs users to set ANNE_LIBRARY_URL, ANNE_LIBRARY_USER, and ANNE_LIBRARY_PASS, but the skill's manifest declares no required env vars and the shipped code does not consume these variables. Requesting institutional credentials is reasonable for a downloader, but here it's not wired into the code and therefore unjustified; providing credentials to an unclear/partially-implemented skill risks credential exposure.
Persistence & Privilege
The skill is not forced (always: false) and does not request persistent presence or modify other skills. It is user-invokable and does not declare autonomous always-on privileges, which is appropriate.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install neckr0ik-anne-library - 安装完成后，直接呼叫该 Skill 的名称或使用
/neckr0ik-anne-library触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Anne's Library Downloader 1.0.0 – Initial release
- Automates downloading of books, articles, and DOIs from major academic library platforms.
- Supports auto-authentication for institutional access.
- Extracts DOIs from URLs and saves metadata with each PDF.
- Handles batch downloads from reading lists.
- Offers format conversion to PDF, EPUB, and text.
- Compatible with platforms including VitalSource, ProQuest, EBSCOhost, JSTOR, PubMed Central, ScienceDirect, Springer Link, and Taylor & Francis Online.
元数据
常见问题
ANNE Library Downloader 是什么？
Automate downloading and DOI extraction for academic books and articles from multiple library databases with institutional login support. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 114 次。
如何安装 ANNE Library Downloader？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install neckr0ik-anne-library」即可一键安装，无需额外配置。
ANNE Library Downloader 是免费的吗？
是的，ANNE Library Downloader 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
ANNE Library Downloader 支持哪些平台？
ANNE Library Downloader 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 ANNE Library Downloader？
由 Neckr0ik（@neckr0ik）开发并维护，当前版本 v1.0.0。
推荐 Skills