openclaw-zotero-scholar

将论文保存到 Zotero 文库，请按照 userid:apiKey 的格式配置 ZOTERO_CREDENTIALS 环境变量。

This skill appears to do what it says (saving papers to your Zotero library), but there are some practical inconsistencies you should consider before installing: - Review the 'uv' requirement: the SKILL requires a binary named 'uv' and offers a brew install for it, but the runtime is a Python script. Confirm what the 'uv' brew formula actually installs and whether you need it; you may instead run the script with python directly (python3 scripts/save_paper.py ...) if you prefer not to add unknown binaries. - Python dependency not installed: the script depends on the pyzotero package but the install spec doesn't install Python packages. Ensure pyzotero is installed in the runtime environment (pip install pyzotero) or the script will fail. - Credentials scope: provide a Zotero API key with minimal necessary scope (a dedicated key for writes if possible) rather than a high-privilege token. The script expects ZOTERO_CREDENTIALS='userID:apiKey'. - Network behavior: the script will call Zotero's API and may download PDFs from arxiv.org when URLs point to arXiv. If you do not want automatic PDF downloads, avoid passing arXiv URLs or edit the script. - Inspect before running: because the brew formula 'uv' is unspecified, inspect what it installs and, if you are unsure, run the Python script in a controlled environment (container or sandbox) after installing pyzotero and using a limited-scope Zotero key. If these points are acceptable and you confirm the 'uv' package is safe or unnecessary for your setup, the skill seems functionally coherent. If you cannot verify the brew formula or do not want extra binaries installed, treat this as a red flag and do not install.

Type: OpenClaw Skill Name: openclaw-zotero-scholar Version: 0.0.1 The skill bundle is a legitimate utility for saving research papers to a Zotero library. The script `scripts/save_paper.py` uses the official `pyzotero` library to manage metadata and includes specific logic to download and attach PDFs from Arxiv. Authentication is handled via a standard environment variable (`ZOTERO_CREDENTIALS`), and the code lacks any indicators of data exfiltration, unauthorized execution, or malicious intent.