Paper Workflow

Turn existing project assets into a submission-ready academic paper. Use when the task involves CFP alignment, evidence scoping, abstract selection, outline...

This orchestration skill itself is coherent and does not request secrets or system-wide access. Before installing or running it, review the companion skills it instructs you to fetch (the lobehub curl targets and the npx package) because those are external content sources and could execute arbitrary instructions. Consider: 1) inspect the remote SKILL.md files and companion skill repos before running npx or curl pipelines; 2) run installs in a sandboxed environment if possible; 3) be prepared that the agent will read your project files (code, logs, screenshots) — only run it on project data you are comfortable sharing with installed skills; and 4) verify any companion skill that requests credentials or network access before providing secrets.

Type: OpenClaw Skill Name: paper-workflow Version: 0.1.0 The skill bundle contains instructions in SKILL.md and README.md that direct the AI agent to download external markdown files via 'curl' from lobehub.com and then 'follow the instructions' found within those files. This pattern creates a significant risk of remote prompt injection, as it allows external, potentially mutable content to dictate the agent's behavior. While the stated purpose of orchestrating academic paper production is plausible and no explicitly malicious code (like data exfiltration) is present, the reliance on fetching and executing remote instructions is a high-risk vulnerability.