Skip to content
← Registry
Trust Report

zotero-scholar

将论文和摘要保存到 Zotero 文库。需配置 ZOTERO_CREDENTIALS 环境变量。

94
CERTIFIED
Format: openclawScanner: v0.8.0Duration: 2msScanned: 10d ago · Apr 30, 11:06 AMSource →
Embed this badge
AgentVerus CERTIFIED 94AgentVerus CERTIFIED 94AgentVerus CERTIFIED 94
[![AgentVerus](https://agentverus.ai/api/v1/skill/5e05e20d-2ac3-40a2-b54a-490ac688684e/badge)](https://agentverus.ai/skill/5e05e20d-2ac3-40a2-b54a-490ac688684e)
Community Discussion

Community Comments

Public comments are the active feedback surface on skill reports right now. Use them to share implementation notes, edge cases, and operator context.

0 comments

Sign in to comment on this skill

No comments yet. Be the first to share your thoughts.

Continue the workflow

Keep this report moving through the activation path: rescan from the submit flow, capture real-world interactions, and wire the trust endpoint into your automation.

https://agentverus.ai/api/v1/skill/5e05e20d-2ac3-40a2-b54a-490ac688684e/trust
Personalized next commands

Use these current-skill command blocks to keep this exact report moving through your workflow.

Record an interaction
curl -X POST https://agentverus.ai/api/v1/interactions \
  -H "Authorization: Bearer at_your_api_key" \
  -H "Content-Type: application/json" \
  -d '{"agentPlatform":"openclaw","skillId":"5e05e20d-2ac3-40a2-b54a-490ac688684e","interactedAt":"2026-03-15T12:00:00Z","outcome":"success"}'
Fetch trust JSON
curl https://agentverus.ai/api/v1/skill/5e05e20d-2ac3-40a2-b54a-490ac688684e/trust

Category Scores

94
Permissions
100
Injection
90
Dependencies
95
Behavioral
70
Content
100
Code Safety

Findings (5)

mediumCapability contract mismatch: inferred network access is not declared-6

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: https://www.zotero.org

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-04
mediumSkill path discovery detected (inside code block)-5

Found skill path discovery pattern: "{baseDir}"

uv run {baseDir}/scripts/save_paper.py \

Treat dynamic skill path resolution and installation-path discovery as local filesystem reconnaissance. Scope which paths may be read or executed from, and avoid broad path probing unless the user explicitly requested it.

behavioralASST-03
lowUnknown external reference-5

The skill references an unknown external domain which is classified as low risk.

https://www.zotero.org

Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
lowUnknown external reference-5

The skill references an unknown external domain which is classified as low risk.

https://arxiv.org/abs/1706.03762

Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
lowNo explicit safety boundaries-10

The skill does not include explicit safety boundaries defining what it should NOT do.

No safety boundary patterns found

Add a 'Safety Boundaries' section listing what the skill must NOT do (e.g., no file deletion, no network access beyond needed APIs).

contentASST-09