📦 KOL Profiler — 医师影响力分析
v1.0.0一键解析医生学术影响力与合作网络，自动抓取论文、引用、共作者数据，生成可视化关系图谱与影响力评分，助力科研合作与精准专家定位。
0· 95·0 当前·0 累计
by 下载技能包
最后更新
2026/3/25
安全扫描
OpenClaw
可疑
medium confidenceThe package is broadly consistent with a local KOL-profiling tool, but the SKILL.md advertises parameters and safeguards that the included script does not implement — this mismatch and the lack of input validation are concerning and deserve review before use.
评估建议
This skill appears to be a small local profiler script, but SKILL.md and the code disagree: the documentation lists many parameters and safety checks that the script does not implement. Before installing or running: (1) review or run the included scripts/main.py directly in a safe environment; (2) do not pass paths to sensitive files — the script will open any JSON path you give it without validation; (3) if you expect --output/--format/other features, request an updated SKILL.md or updated code...详细分析 ▾
✓ 用途与能力
The name/description (analyze physician influence and collaboration networks) matches the included Python script: main.py computes simple publication metrics and collaborators from a provided JSON or demo data. No network calls or external services are present and no extra binaries or credentials are requested.
⚠ 指令范围
SKILL.md documents many parameters (--therapeutic-area, --metrics, --output, --format) and security checks (input validation, preventing ../ traversal) that are not implemented in scripts/main.py. The script only accepts --author, --data, and --demo. The SKILL.md promises output-file and format options that the code does not support, creating a clear mismatch. The script reads an arbitrary JSON file path supplied by the user with no validation beyond json.load, so malicious or accidental input could expose sensitive local data if the user supplies an unexpected path.
✓ 安装机制
No install spec (instruction-only style plus a single small script). Nothing is downloaded or written to disk by an installer; only the included script would run. This is the lowest install risk.
✓ 凭证需求
The skill declares no required environment variables or credentials and the code contains none. That is proportional to the stated purpose.
✓ 持久化与权限
The skill does not request persistent presence, does not modify other skills or system-wide settings, and does not require elevated privileges. It runs locally and only performs file reads/writes triggered by user invocation.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/25
Initial release of kol-profiler. - Provides tools for analyzing physician academic impact and collaboration networks. - Supports KOL identification, collaboration mapping, and advisory/speaker selection. - Allows filtering by therapeutic area, geography, and academic metrics (h-index, citations, etc). - Outputs ranked KOL lists, network visualization data, publication timelines, and collaboration clusters. - Includes basic security and risk controls; runs scripts locally without external network access.
● 无害
安装命令
点击复制官方npx clawhub@latest install kol-profiler
镜像加速npx clawhub@latest install kol-profiler --registry https://cn.longxiaskill.com镜像同步中