pubmed2blog

Convert PubMed research papers into SEO-optimized, patient-friendly healthcare blog articles using a streamlined discover-extract-generate pipeline.

Before installing, verify the npm package's provenance: check the package page/registry (author, repository, recent publish history, and open-source code). Avoid global installs until you trust the package; prefer to install into a container or VM first. Ask the publisher which API keys the tool needs and where they are stored (local config file, OS keychain, or remote). Inspect the package's postinstall scripts and source code for network calls or unexpected filesystem writes. If you must use it in production, pin a known-good version, run npm audit, and consider running it with least privilege (no broad credentials present). If you want help reviewing the package's repository or package.json before running npm install -g, provide the package URL or tarball.

Type: OpenClaw Skill Name: pubmed2blog Version: 1.0.0 The `SKILL.md` file instructs the AI agent to "Schedule via cron for regular content generation." This grants the agent the ability to modify system-level scheduled tasks, which is a high-privilege operation and a common vector for persistence or unauthorized execution, even if the stated purpose is benign. Additionally, the skill relies on installing an external `npm` package (`pubmed2blog`) via `npm install -g`, whose contents are not provided for analysis, introducing a supply chain risk.