zijiyong

Use when the user mentions wos, WOS, WoS, or Web of Science and wants topic-based literature search, Shenzhen University library login, paper screening, abst...

This skill appears to do what it says (search WoS via the Shenzhen University route and write to Feishu via local lark-cli), but there are a few things to check before installing/using it: - Confirm you trust the skill's source: there is no homepage or repository link and the owner is unknown. Prefer skills with clear provenance. - The runtime needs local tools (lark-cli and possibly a playwright-cli). The skill metadata lists no required binaries — verify those CLIs are installed and configured locally before use. The skill will run lark-cli commands that can read or modify your Feishu Base via your local CLI session. - The skill asks for Shenzhen University (SZU) login credentials and will pause for 2FA; do not share persistent passwords. The SKILL includes a hardcoded default SZU username (2410032057) — ask the author why that value is present and remove it if it is unrelated to you. - Because the skill runs local commands and interacts with third-party sites (SZU auth, WoS, Feishu via lark-cli), only proceed if you are comfortable providing the necessary runtime credentials and have verified the local tooling is trustworthy and properly scoped. If you want to proceed: ask the skill author to (1) declare required binaries (lark-cli, playwright-cli if used), (2) remove or explain any hardcoded personal identifiers, and (3) provide a source or homepage so you can verify provenance. If these are not available, treat the skill as higher-risk and prefer manual execution of the described workflow instead.

Type: OpenClaw Skill Name: zijiyong Version: 1.0.1 The skill bundle facilitates a legitimate academic workflow for searching Web of Science (WoS) via the Shenzhen University (SZU) library and exporting results to Feishu Base using local CLI tools. It demonstrates good security practices by explicitly instructing the agent not to store passwords, to wait for user intervention during multi-factor authentication (MFA), and to confirm target locations before writing data. While it contains specific local environment details like a default SZU username and local file paths (e.g., in SKILL.md and playbook.md), these appear to be for the user's personal automation convenience rather than malicious intent.