📦 CDISC Library API Skill — 临床标准速查
v1.0.0一站式调用 CDISC Library API，秒查 QRS 量表、ADaM、CDASH、SDTM 及受控术语，自动解析返回 JSON，支持变量名、结构、版本比对，助力临床试验数据标准化。
0· 304·1 当前·1 累计
by 下载技能包
最后更新
2026/4/20
安全扫描
OpenClaw
可疑
high confidenceThe skill generally matches its stated purpose (a CDISC Library API client), but the package metadata omits required credentials and a Python dependency and the code reads a repository TOOLS.md file and writes cache files — these mismatches and behaviors deserve attention before installing.
评估建议
This skill appears to implement a legitimate CDISC Library API client, but the manifest metadata is incomplete. Before installing: 1) Expect to provide a CDISC API key (CDISC_API_KEY) — the code will fail without it; the SKILL metadata should declare this but currently does not. 2) Ensure the Python 'requests' library is available (the package has no install script). 3) Review any TOOLS.md at your repository root (the client will try to read it to extract an API key) and remove any sensitive dat...详细分析 ▾
⚠ 用途与能力
The skill's name/description and included code consistently implement a CDISC Library API client and expose the CLI commands advertised. However the registry metadata declares no required environment variables or dependencies while the code and SKILL.md clearly require an API key (CDISC_API_KEY or a value in TOOLS.md) and the requests Python package. This mismatch between declared requirements and actual needs is incoherent and should be corrected.
ℹ 指令范围
SKILL.md and the code limit runtime actions to calling https://api.library.cdisc.org, caching responses, and reading an API key. The cdisc_client explicitly attempts to read TOOLS.md (three levels above the file) to find an API key and will fail if no key is found. The skill also creates and writes cache files under its own .cache directory. These behaviors are plausible for the claimed purpose but reading a repo-level TOOLS.md is a broader file access than many users expect.
⚠ 安装机制
There is no install spec even though the Python code requires the external 'requests' library (the client prints an error and exits if requests is missing). The package ships code files (not just instructions) but the registry metadata did not declare dependencies. That omission is inconsistent and increases installation risk (silent runtime failures or unexpected user prompts to install packages).
⚠ 凭证需求
The only credential the code needs is a CDISC API key (expected for this integration). However the registry did not declare CDISC_API_KEY as required. The client will attempt to read TOOLS.md for an API key, which means it may parse repository files outside the skill directory — this could inadvertently read other content if TOOLS.md contains other secrets. No other unrelated credentials are requested.
✓ 持久化与权限
The skill does not request 'always' or elevated privileges. It writes cache files into its own 'skills/cdisc/.cache/' directory (normal for caching). It does not modify other skills or global agent configuration. Autonomous invocation is enabled (platform default) but is not combined with unusual privileges here.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/8
Initial release - Query CDISC Library API for clinical data standards (QRS, ADaM, CDASH, SDTM, Controlled Terminology)
● 可疑
安装命令
点击复制官方npx clawhub@latest install cdisc-library-api
镜像加速npx clawhub@latest install cdisc-library-api --registry https://cn.longxiaskill.com