专利专业代理 / Patent Professional Agents

📜 专利专业代理 - Patent Professional Agents 一个专业的多代理专利撰写与优化技能套件，覆盖专利申请全流程。 🎯 核心功能： • 场景一：用户想法 → 技术挖掘 → 检索分析 → 专利撰写 → 质量审核 • 场景二：用户初稿 → 问题分析 → 优化建议 → 强化权利要求 • 场景三...

This package appears to implement the patent-drafting and conversion features it advertises, but there are operational and security issues you should check before installing or running it: 1) System dependencies not declared in the registry: The code and docs require pandoc, mermaid-cli (mmdc), Node/Puppeteer and a Chromium binary (mermaid-cli often downloads Chromium). The manifest lists no required binaries — install and verify these tools yourself before running. 2) Puppeteer/Chromium and --no-sandbox: The converter writes a Puppeteer config and invokes mmdc with a config that uses '--no-sandbox'. Running headless Chromium with --no-sandbox reduces process isolation and is only safe in controlled environments; avoid running this as root on untrusted hosts. 3) Default paths: The script defaults to /root/workspace/patent/new and expects templates under agents/patent-converter/templates/template.docx. Confirm the working directory and template location and avoid running the script with elevated privileges against directories containing unrelated data. 4) Auto-trigger behavior: The SOUL docs describe auto-invocation when the auditor 'passes'. If you enable autonomous agent invocation, verify the trigger logic and whether you'll get prompts before the converter processes or overwrites files. 5) External search skills: The skill depends on tavily-search and aminer-open-academic for prior art. Those skills will perform network searches and may send your draft text outside your environment. Review their privacy/policy details before providing confidential drafts. 6) Recommended precautions: run in an isolated/test environment first, inspect convert_patents.py and the templates, install dependencies manually from trusted package sources, avoid running as root (or remove --no-sandbox and run under a non-root user), and confirm auto-trigger settings. If you need higher assurance, ask the author to add explicit 'required binaries' to the registry and to avoid recommending --no-sandbox.

Type: OpenClaw Skill Name: patent-professional-agents Version: 1.0.1 The skill bundle contains several high-risk capabilities that expand the agent's attack surface. Specifically, the 'prior-art-researcher' agent is instructed in its SOUL.md to autonomously search for and install new skills via 'clawhub install', which could lead to the execution of untrusted third-party code. The 'patent-converter' agent includes a Python script (convert_patents.py) that uses subprocess.run to execute external binaries like pandoc and mmdc on user-provided Markdown content. Additionally, the 'continuous-learning' skill implements a mechanism to record session observations and 'instincts' to local storage, which may inadvertently capture and persist sensitive patent data or user interactions.