← 返回 Skills 市场
jonbuckles

Research Library

作者 WizardSage · GitHub ↗ · v0.1.0
cross-platform ⚠ suspicious
1467
总下载
1
收藏
3
当前安装
1
版本数
在 OpenClaw 中安装
/install research-library
功能描述
Local-first multimedia research library for hardware projects. Capture code, CAD, PDFs, images. Search with material-type weighting. Project isolation with cross-references. Async extraction. Backup + restore.
安全使用建议
This skill appears to be what it says: a local CLI research library that indexes files you add and stores a SQLite DB and attachments locally. Before installing or running it: 1) Review and if desired override the default data/db path (RESLIB_DATA_DIR or --db) so imports and backups go to a directory you control; 2) install optional OCR prerequisites (system tesseract-ocr) only if you need OCR; 3) because the skill bundle contains executable Python code from an unknown source (no homepage/repo owner is authoritative in the metadata), consider inspecting reslib/cli.py and reslib/extractor.py for any unexpected network calls or behavior and run the package in an isolated environment or container for initial testing; 4) run the included test suite (pytest) or smoke_test.sh in a sandbox before pointing it at large or sensitive directories; 5) there are no requested credentials, but verify there are no hardcoded endpoints in the code if you want to ensure data never leaves your machine.
功能分析
Type: OpenClaw Skill Name: research-library Version: 0.1.0 The OpenClaw AgentSkills skill bundle is classified as suspicious due to its broad file system and network access capabilities, which, while plausibly needed for its stated purpose as a 'local-first multimedia research library,' present significant attack surface for a compromised AI agent. The `reslib add` command can download files from arbitrary URLs (`urllib.request.urlretrieve` in `reslib/cli.py`) and copy any local file into the managed library directory, potentially leading to resource exhaustion or sensitive data staging. Furthermore, the `TECHNICAL-NOTES.md` file explicitly acknowledges 'FTS5 Query Syntax Edge Cases' as a problem needing improvement, indicating a known, partially mitigated vulnerability surface for prompt injection against the underlying SQLite FTS5 engine.
能力评估
Purpose & Capability
Name/description (local multimedia research library) align with the files and CLI: SQLite + FTS5, extractors for PDFs/images/code, async workers, backup/restore, and project scoping. The included modules (cli, extractor, search, worker, database) match the stated functionality.
Instruction Scope
The SKILL.md and other docs instruct the agent/user to import local files, run extraction, and store DB/backups under a home-path (e.g. ~/.openclaw/research). That is expected for a local-first tool, but the skill will read and copy arbitrary files the user points it at and will create a local DB and attachments directory. The docs reference environment variables (RESLIB_DATA_DIR / RESLIB_DB) and CLI options for overriding paths; SKILL.md does not request any unrelated files or cloud endpoints. Recommendation: review and set data-dir before bulk imports if you want to control where files are written.
Install Mechanism
The registry shows no automated install spec in the skill bundle, but the package includes full Python code, an entry_point, and a _meta.json with dependencies (pdfplumber, pytesseract, click). SKILL.md suggests pip install /path/to/research-library or clawhub install. No remote downloads or odd URLs were present in the provided files. Minor packaging inconsistency: the skill is described as 'instruction-only' but contains code and a package manifest.
Credentials
The skill does not request credentials or secrets and does not declare required environment variables in the registry. Docs/CLI mention optional env vars (RESLIB_DATA_DIR, RESLIB_DB) and dependencies (pytesseract plus the system tesseract binary). The only notable mismatch: system 'tesseract-ocr' is an optional runtime dependency referenced in docs but not declared as a required binary in the registry. No credentials (API keys, AWS, etc.) are requested.
Persistence & Privilege
The skill is not always: true and does not request special platform privileges. It stores data in user-visible locations (default ~/.openclaw/research/) and creates backups there; that is consistent with a local-first CLI tool. Autonomous invocation is enabled by default (standard behavior) but combined with no broad credentials or network endpoints, the risk is limited to local file operations.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install research-library
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /research-library 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.1.0
Initial release of research-library: a local-first multimedia research library for hardware projects. - Capture and organize code, CAD, PDFs, images, and schematics with project isolation. - Full-text search with material-type weighting and intelligent ranking. - Automatic extraction of text, metadata, and code structure. - Async workers for fast, non-blocking extraction and daily backup with 30-day retention. - CLI covering add/search/export/link/archive and project/tag management. - Integration-ready with War Room RL1 protocol. - Extensive documentation, testing framework, and performance exceeding targets.
元数据
Slug research-library
版本 0.1.0
许可证
累计安装 3
当前安装数 3
历史版本数 1
常见问题

Research Library 是什么?

Local-first multimedia research library for hardware projects. Capture code, CAD, PDFs, images. Search with material-type weighting. Project isolation with cross-references. Async extraction. Backup + restore. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 1467 次。

如何安装 Research Library?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install research-library」即可一键安装,无需额外配置。

Research Library 是免费的吗?

是的,Research Library 完全免费(开源免费),可自由下载、安装和使用。

Research Library 支持哪些平台?

Research Library 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Research Library?

由 WizardSage(@jonbuckles)开发并维护,当前版本 v0.1.0。

💬 留言讨论