Paper review pro

高精度论文检索与检阅系统，支持多源检索、智能筛选、结构化摘要、BibTeX 导出、CCF 评级与综合评分

This skill appears to implement the advertised review/search features, but it quietly reads global OpenClaw config (~/.openclaw/openclaw.json) and environment variables (possible gateway/API tokens) and sets HF endpoint env vars without declaring them. Before installing or running: 1) inspect ~/.openclaw/openclaw.json and remove or rotate any sensitive tokens if you don't want them used; 2) run the skill in an isolated environment (dedicated VM or container) if you are worried about credential exposure or HF endpoint overrides; 3) if you don't need LLM features, run with --no-llm and/or disable network access to reduce risk; 4) review the code paths that call external LLM gateways (expansion.py) and the lines that set HF_ENDPOINT/HF_HUB_ENDPOINT in review.py; 5) consider enabling only explicit environment variables you control (set OPENCLAW_GATEWAY_URL and token) rather than allowing the skill to read global config. If you need, ask the author to declare required env/config in SKILL.md and to avoid reading other skills'/global configs.

Type: OpenClaw Skill Name: paper-review-pro Version: 1.0.0 The 'paper-review-pro' skill bundle is a legitimate academic research tool designed to automate paper retrieval, ranking, and summarization. It integrates with arXiv and Semantic Scholar APIs, uses LLMs (via OpenClaw Gateway or Dashscope) for generating structured summaries and query expansions, and includes a local database for CCF (China Computer Federation) rankings. The code is well-structured, featuring robust error handling such as a web-scraping fallback for arXiv (scripts/search/arxiv.py) and a timeout monitor to prevent process hangs (scripts/review.py). No evidence of malicious intent, data exfiltration, or unauthorized execution was found; all network and file operations are consistent with the tool's stated purpose of literature review and BibTeX management.