Research Review Assistant

自动检索并结构化总结科研文献，支持相关性评估、多轮优化及SCI格式综述草稿生成。

What to consider before installing: - Capability mismatch: the SKILL.md/README advertise multi-source retrieval (arXiv, PubMed, Google Scholar) but the included Python code only implements arXiv queries. Ask the author or inspect the rest of the code to confirm support for PubMed/Google Scholar before relying on those features. - Packaging oddness: package.json (an npm manifest) lists Python libraries and a different version than the registry metadata. This is likely a packaging mistake but could cause confusion about how to install dependencies; verify dependency installation instructions and run in an isolated environment. - Network behavior: the script performs outbound HTTP requests to arXiv (public API). This will leak search queries and requested paper metadata to that remote service — expected for this skill, but worth noting for sensitive queries. The script uses an http arXiv endpoint; consider network encryption policies in your environment. - Source provenance: the skill source/homepage and owner details are minimal/unknown. If you need stronger assurance, request the upstream repository, tests, or an author identity and a signed release. - Next steps to raise confidence: confirm full implementation (PubMed/Google Scholar), correct packaging metadata or provide a proper install spec, and review the remainder of the Python file (truncated in the manifest) for any unexpected external endpoints or file I/O. If you cannot obtain those, run the skill in a sandboxed environment and avoid providing private credentials or sensitive project text as inputs.

Type: OpenClaw Skill Name: research-review-assistant Version: 1.0.0 The skill is a legitimate academic research assistant designed to search, analyze, and summarize papers from arXiv. The core logic in `review_generator.py` uses the official arXiv API and performs basic keyword-based analysis to generate Markdown reports. No evidence of data exfiltration, unauthorized execution, or malicious prompt injection was found in the code or instructions.