Zotero Manager

兼容 Zotero 文献管理，支持文献检索、DOI 导入、分类管理及参考文献导出，功能已整合至 knowledge 统一入口。

This skill appears to do what it says: it needs a Zotero API key (or the Zotero local API enabled) and will read that key from ~/.config/zotero (or from the ZOTERO_API_KEY env var) and call the Zotero APIs including local localhost:23119 and official zotero domains. Before installing: (1) Verify you are comfortable storing a Zotero API key in your home config directory or env var; use a read-only token (Read Library) as recommended. (2) Inspect and, if desired, remove or update the hardcoded Windows workspace path references in the scripts so they don't point to another user's directory. (3) Confirm you trust the author/source (homepage is missing). If you have any doubt, review the three Python files (zotero_search.py, zotero_import.py, zotero_diagnose.py) locally before running and rotate your Zotero token after testing. If you want the metadata to be more transparent, ask the publisher to declare the expected env var (ZOTERO_API_KEY) and config-file locations in the registry metadata.

Type: OpenClaw Skill Name: zotero-manager Version: 1.0.0 The zotero-manager skill bundle provides legitimate functionality for interacting with the Zotero reference management system. It includes scripts for searching libraries (zotero_search.py), importing literature via DOI (zotero_import.py), and diagnosing local API connectivity (zotero_diagnose.py). The code handles sensitive API keys by reading them from local configuration files (~/.config/zotero/) and communicates exclusively with official Zotero endpoints (api.zotero.org, translate.zotero.org) or the local Zotero service (localhost:23119). No evidence of data exfiltration, unauthorized access, or malicious prompt injection was found.