📦 literature-recommendation — 文献推荐
v1.0.3用于论文推荐、文献推荐、论文匹配、按偏好找论文、根据研究方向推荐论文；从数据库读取成员偏好，召回候选论文并输出给OpenClaw。
0· 77·0 当前·0 累计
by 安全扫描
OpenClaw
安全
high confidenceThe skill's code, instructions, and required environment are consistent with a small literature-recommendation service that reads profiles from PostgreSQL, fetches papers from arXiv, scores them with simple rules, persists results, and produces OpenClaw payloads.
评估建议
This skill appears to do what it says: it needs a PostgreSQL DSN and will create and modify tables in that database, fetch papers from arXiv, apply local rule-based scoring, and write reports/payloads to the configured output directory. Before installing or running: 1) Resolve the manifest inconsistency (registry metadata vs skill.yaml). 2) Run it against a test or dedicated database (not a production DB) because it will create tables and persist data. 3) Provide only a DB user with the minimal ...详细分析 ▾
✓ 用途与能力
Name/description (paper/literature recommendation) align with the implementation: it fetches from arXiv, loads member profiles from PostgreSQL, does rule-based scoring, stores papers and recommendations, and builds personal-card payloads for OpenClaw.
✓ 指令范围
SKILL.md instructs running the CLI to load profiles from the DB, fetch arXiv, score, persist, and output payloads. The runtime instructions match the code (pipeline, storage, fetcher). There are no instructions to read unrelated local files or contact unexpected external endpoints beyond arXiv and the configured database.
ℹ 安装机制
There is no explicit install spec in the registry (no packaged install step), but the repo includes Python source and requirements.txt. That means the code runs directly but expects dependencies (requests, python-dotenv, psycopg[binary]) to be installed by the operator. This is reasonable for a Python CLI but the package omission (no install instructions beyond the CLI usage) is worth noting.
ℹ 凭证需求
The skill requires a PostgreSQL DSN (OPENCLAW_DB_DSN) and an output directory (OPENCLAW_OUTPUT_DIR) — both declared in skill.yaml and env-example and are appropriate for its function. Note: the top-level registry summary in the prompt incorrectly listed 'Required env vars: none' which is inconsistent with the included skill.yaml/env-example; this mismatch should be resolved before deployment.
✓ 持久化与权限
The skill is not always-enabled and uses normal autonomous invocation defaults. It will initialize database schema (CREATE TABLE IF NOT EXISTS) on first connect and persist papers/recommendations to the configured PostgreSQL database — this is expected for its purpose but means it will modify the specified DB. It does not modify other skills or system-wide configs.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
安装命令
点击复制官方npx clawhub@latest install literature-recommendation
镜像加速npx clawhub@latest install literature-recommendation --registry https://cn.longxiaskill.com