chore: release v2.19.0 with upstream skills ab2f84ab1059

Refresh the vendored writing-skill subset from
K-Dense-AI/scientific-agent-skills, moving the pin from release v2.60.0
(223f5a30f892) to main HEAD ab2f84ab1059 (upstream version 2.61.0).
Pinned to the commit rather than a tag because upstream has not yet
published a v2.61.0 release.

The refresh carries three upstream fixes into this package:

- Image generation requests the correct google/gemini-3.1-flash-image
  slug instead of the text-only google/gemini-3.1-flash-image-preview,
  which failed with "No endpoints found that support the requested
  output modalities" across scientific-schematics, infographics,
  latex-posters, literature-review, citation-management, and
  scientific-slides.
- OPENROUTER_API_KEY now resolves from --api-key, then the environment,
  then the first .env found walking up from the working directory, using
  only the standard library, so a missing python-dotenv no longer reads
  as a missing credential.
- soffice.py in docx/pptx/xlsx gained more robust LibreOffice binary
  discovery and error reporting.

skills.lock.json and all three snapshots (skills/, .claude/skills/,
scientific_writer/.claude/skills/) were regenerated; the same 26
selected skills continue to ship.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

Author: TKassis

.claude-plugin/marketplace.json

@@ -2,7 +2,7 @@
   "name": "claude-scientific-writer",
   "metadata": {
     "description": "Skills and setup for scientific writing (papers, grants, posters, clinical reports) using the scientific-writer toolkit.",
-    "version": "2.18.0",
+    "version": "2.19.0",
     "homepage": "https://github.com/K-Dense-AI/claude-scientific-writer"
   },
   "owner": {

.claude/skills.lock.json

@@ -1,14 +1,14 @@
 {
   "schema_version": 1,
   "repository": "https://github.com/K-Dense-AI/scientific-agent-skills",
-  "ref": "v2.60.0",
-  "commit": "223f5a30f8928bb76b2e93db282ebe0d6ff5b2ea",
-  "snapshot_sha256": "493be8334f11bf1ca4c41910a8b49ec116f753c36b93e3ce08cc0de4c91b6c9a",
+  "ref": "ab2f84ab10597c59fac186ecda6d5edd5dcc8b92",
+  "commit": "ab2f84ab10597c59fac186ecda6d5edd5dcc8b92",
+  "snapshot_sha256": "01d64156c9acf8acb0bce8a9a527907a579afcc4306d456da19a91aae852cf2a",
   "skills": [
     {
       "source": "citation-management",
       "destination": "citation-management",
-      "sha256": "68e4425938dde655a3ecb9a2fca14a773cfc50e074eb47d4858dea0d0222fe5a"
+      "sha256": "5809be57bc54ed6b04c629a2c8a231b1d3d81d68f1873c7519cd4bbc7c25c056"
     },
     {
       "source": "clinical-decision-support",
@@ -23,7 +23,7 @@
     {
       "source": "docx",
       "destination": "document-skills/docx",
-      "sha256": "894ee6d6e177a4415e04db3996427d4d29299278e6eba91d7c87152cf51ac220"
+      "sha256": "297eabe17185286e63696c5e99cc263838e00cffb9ad5e44add9b0455487307f"
     },
     {
       "source": "pdf",
@@ -33,12 +33,12 @@
     {
       "source": "pptx",
       "destination": "document-skills/pptx",
-      "sha256": "e2e470674c9e4f191a76689f22b75250029c593625021bb11799af2e8780767a"
+      "sha256": "bdb280197d933df17f4436a3f34be5aa06e1b4e6cf52d73d74b62157c5915915"
     },
     {
       "source": "xlsx",
       "destination": "document-skills/xlsx",
-      "sha256": "3c41d5cb1df12e0566594bc1c53c97aa340e749751df12bcf3554550f3bb57c5"
+      "sha256": "dbb2a5ae521c3e16c0864329bdfd5c8491d7e2e52295bfaefe432b570d67e882"
     },
     {
       "source": "generate-image",
@@ -53,17 +53,17 @@
     {
       "source": "infographics",
       "destination": "infographics",
-      "sha256": "4864cc43c508cf87a070173c9804f06750cc1f25a74e462c04e34378b04a5473"
+      "sha256": "a7f703b672b5211a5b26fb180c25d386310ed74ca6fff4f97b8225403dffe847"
     },
     {
       "source": "latex-posters",
       "destination": "latex-posters",
-      "sha256": "46149bd50691db8002de8538a1e2dfe0355d983029b332e029b472d008570368"
+      "sha256": "06f0c07b758fce3de413c8eb861cf9a9a404436633d452b04220b6396bc9d92c"
     },
     {
       "source": "literature-review",
       "destination": "literature-review",
-      "sha256": "354195c3dd25918bbfc82d2f4702fcfec377f50248fbed3ee9f2b0892c32043a"
+      "sha256": "e7960c4d80794b43df6ad64ce0362d8b1bee95c55d166574b27d108fec4ac8d1"
     },
     {
       "source": "market-research-reports",
@@ -113,12 +113,12 @@
     {
       "source": "scientific-schematics",
       "destination": "scientific-schematics",
-      "sha256": "6ecc55c1e1074916c09be818546ca3305d841cdb169a7dac206168972d6e910f"
+      "sha256": "b35312e248959157be8497ed0dc1252d187aa5ee6fef44dc1333376f680bd4b5"
     },
     {
       "source": "scientific-slides",
       "destination": "scientific-slides",
-      "sha256": "521904cdaf0c3883f712ae471c96ebb6cab43b58baf4f7d168e3400aaebeab35"
+      "sha256": "83ad63b39f8afda6098d0da69978522ae0648b0a4f8328a3a9d0f3d7b4f914fe"
     },
     {
       "source": "scientific-writing",

.claude/skills/citation-management/SKILL.md

@@ -4,7 +4,7 @@ description: Comprehensive citation management for academic research. Search Goo
 allowed-tools: Read Write Edit Bash
 license: MIT License
 metadata:
-  version: "1.5"
+  version: "1.6"
   skill-author: K-Dense Inc.
   openclaw:
     primaryEnv: OPENROUTER_API_KEY

.claude/skills/citation-management/scripts/generate_schematic.py

@@ -40,6 +40,43 @@
 )
 
 
+def resolve_api_key(explicit=None):
+    """Resolve the OpenRouter key from --api-key, the environment, then any .env file.
+
+    The .env scan walks up from the working directory and finally checks the
+    script's own directory, so running from anywhere inside a project picks up
+    the key at its root. The child process is handed the resolved value through
+    build_subprocess_env, so it never has to repeat this search.
+    """
+    if explicit:
+        return explicit
+
+    from_env = os.environ.get("OPENROUTER_API_KEY", "").strip()
+    if from_env:
+        return from_env
+
+    cwd = Path.cwd()
+    for directory in [cwd, *cwd.parents, Path(__file__).resolve().parent]:
+        env_file = directory / ".env"
+        if not env_file.is_file():
+            continue
+        try:
+            content = env_file.read_text(encoding="utf-8", errors="replace")
+        except OSError:
+            continue
+        for raw in content.splitlines():
+            line = raw.strip()
+            if line.startswith("#") or "=" not in line:
+                continue
+            name, _, value = line.partition("=")
+            if name.strip() == "OPENROUTER_API_KEY":
+                value = value.strip().strip('"').strip("'")
+                if value:
+                    return value
+
+    return None
+
+
 def build_subprocess_env(api_key):
     """Return a minimal environment for the AI generation subprocess."""
     env = {name: os.environ[name] for name in FORWARDED_ENV_VARS if name in os.environ}
@@ -111,15 +148,16 @@ def main():
 
     args = parser.parse_args()
 
-    # Check for API key
-    api_key = args.api_key or os.getenv("OPENROUTER_API_KEY")
+    # Check for API key — resolves --api-key, the environment, then any .env file
+    api_key = resolve_api_key(args.api_key)
     if not api_key:
-        print("Error: OPENROUTER_API_KEY environment variable not set")
+        print("Error: OPENROUTER_API_KEY not found")
         print("\nFor AI generation, you need an OpenRouter API key.")
         print("Get one at: https://openrouter.ai/keys")
         print("\nSet it with:")
         print("  export OPENROUTER_API_KEY='your_api_key'")
-        print("\nOr use --api-key flag")
+        print("\nOr add OPENROUTER_API_KEY=your_api_key to a .env file")
+        print("Or use --api-key flag")
         sys.exit(1)
 
     # Find AI generation script

.claude/skills/citation-management/scripts/generate_schematic_ai.py

@@ -33,20 +33,42 @@
     print("Error: requests library not found. Install with: pip install requests")
     sys.exit(1)
 
-# Try to load .env file from multiple potential locations
-def _load_env_file():
-    """Load .env file from current directory or script directory only."""
-    try:
-        from dotenv import load_dotenv
-    except ImportError:
-        return False
-
-    for candidate in [Path.cwd() / ".env", Path(__file__).resolve().parent / ".env"]:
-        if candidate.exists():
-            load_dotenv(dotenv_path=candidate, override=False)
-            return True
+def _resolve_api_key(explicit: Optional[str] = None) -> Optional[str]:
+    """Resolve the OpenRouter key from --api-key, the environment, then any .env file.
+
+    The .env scan walks up from the working directory and finally checks the
+    script's own directory, so running from anywhere inside a project picks up
+    the key at its root. Only the standard library is used: python-dotenv is a
+    common omission, and a missing optional dependency should not read as a
+    missing credential.
+    """
+    if explicit:
+        return explicit
+
+    from_env = os.environ.get("OPENROUTER_API_KEY", "").strip()
+    if from_env:
+        return from_env
+
+    cwd = Path.cwd()
+    for directory in [cwd, *cwd.parents, Path(__file__).resolve().parent]:
+        env_file = directory / ".env"
+        if not env_file.is_file():
+            continue
+        try:
+            content = env_file.read_text(encoding="utf-8", errors="replace")
+        except OSError:
+            continue
+        for raw in content.splitlines():
+            line = raw.strip()
+            if line.startswith("#") or "=" not in line:
+                continue
+            name, _, value = line.partition("=")
+            if name.strip() == "OPENROUTER_API_KEY":
+                value = value.strip().strip('"').strip("'")
+                if value:
+                    return value
 
-    return False
+    return None
 
 
 class ScientificSchematicGenerator:
@@ -125,13 +147,8 @@ def __init__(self, api_key: Optional[str] = None, verbose: bool = False):
             verbose: Print detailed progress information
         """
         # Priority: 1) explicit api_key param, 2) environment variable, 3) .env file
-        self.api_key = api_key or os.getenv("OPENROUTER_API_KEY")
-        
-        # If not found in environment, try loading from .env file
-        if not self.api_key:
-            _load_env_file()
-            self.api_key = os.getenv("OPENROUTER_API_KEY")
-        
+        self.api_key = _resolve_api_key(api_key)
+
         if not self.api_key:
             raise ValueError(
                 "OPENROUTER_API_KEY not found. Please either:\n"
@@ -144,9 +161,11 @@ def __init__(self, api_key: Optional[str] = None, verbose: bool = False):
         self.verbose = verbose
         self._last_error = None  # Track last error for better reporting
         self.base_url = "https://openrouter.ai/api/v1"
-        # Nano Banana 2 - Google's advanced image generation model
-        # https://openrouter.ai/google/gemini-3.6-flash
-        self.image_model = "google/gemini-3.1-flash-image-preview"
+        # Nano Banana 2 - Google's advanced image generation model. The slug must
+        # be an image-output model; a text-only chat model is rejected with
+        # "No endpoints found that support the requested output modalities".
+        # https://openrouter.ai/google/gemini-3.1-flash-image
+        self.image_model = "google/gemini-3.1-flash-image"
         # Gemini 3.6 Flash for quality review - excellent vision and reasoning
         self.review_model = "google/gemini-3.6-flash"
 
@@ -776,13 +795,14 @@ def main():
 
     args = parser.parse_args()
 
-    # Check for API key
-    api_key = args.api_key or os.getenv("OPENROUTER_API_KEY")
+    # Check for API key — resolves --api-key, the environment, then any .env file
+    api_key = _resolve_api_key(args.api_key)
     if not api_key:
-        print("Error: OPENROUTER_API_KEY environment variable not set")
+        print("Error: OPENROUTER_API_KEY not found")
         print("\nSet it with:")
         print("  export OPENROUTER_API_KEY='your_api_key'")
-        print("\nOr provide via --api-key flag")
+        print("\nOr add OPENROUTER_API_KEY=your_api_key to a .env file")
+        print("Or provide via --api-key flag")
         sys.exit(1)
 
     # Validate iterations - enforce max of 2

.claude/skills/document-skills/docx/SKILL.md

@@ -3,7 +3,7 @@ name: docx
 description: "Use this skill whenever the user wants to create, read, edit, or manipulate Word documents (.docx files) or Word templates (.dotx files). Triggers include: any mention of 'Word doc', 'word document', '.docx', '.dotx', or requests to produce professional documents with formatting like tables of contents, headings, page numbers, or letterheads. Also use when extracting or reorganizing content from .docx or .dotx files, inserting or replacing images in documents, performing find-and-replace in Word files, working with tracked changes or comments, or converting content into a polished Word document. If the user asks for a 'report', 'memo', 'letter', 'template', or similar deliverable as a Word or .docx file, use this skill. Do NOT use for PDFs, spreadsheets, Google Docs, or general coding tasks unrelated to document generation."
 license: Proprietary. LICENSE.txt has complete terms
 metadata:
-  version: "2.0"
+  version: "2.1"
   skill-author: Anthropic, PBC
   source: https://github.com/anthropics/skills/tree/main/skills/docx
 ---

.claude/skills/document-skills/docx/scripts/office/soffice.py

@@ -15,8 +15,10 @@
 callers that build their own argv (they must pass -env:UserInstallation too).
 """
 
+import atexit
 import contextlib
 import os
+import shutil
 import socket
 import subprocess
 import tempfile
@@ -73,7 +75,13 @@ def run_soffice(args: Iterable[str], **kwargs) -> subprocess.CompletedProcess:
 
 
 
-_SHIM_SO = Path(tempfile.gettempdir()) / "lo_socket_shim.so"
+#: Compiled once per process, not cached on disk between runs. An earlier version
+#: built the shim at a fixed /tmp/lo_socket_shim.so and reused whatever was already
+#: there, which let any local user pre-plant a shared object at that predictable
+#: path and get it LD_PRELOADed into every subsequent soffice run. mkdtemp gives an
+#: unpredictable directory created 0700 and owned by us, so neither the .c we
+#: compile nor the .so we load can be swapped by another user.
+_shim_so: Path | None = None
 
 
 def _needs_shim() -> bool:
@@ -86,18 +94,24 @@ def _needs_shim() -> bool:
 
 
 def _ensure_shim() -> Path:
-    if _SHIM_SO.exists():
-        return _SHIM_SO
+    global _shim_so
+    if _shim_so is not None and _shim_so.exists():
+        return _shim_so
 
-    src = Path(tempfile.gettempdir()) / "lo_socket_shim.c"
+    shim_dir = Path(tempfile.mkdtemp(prefix="lo-shim-"))
+    atexit.register(shutil.rmtree, shim_dir, True)
+
+    src = shim_dir / "lo_socket_shim.c"
+    so = shim_dir / "lo_socket_shim.so"
     src.write_text(_SHIM_SOURCE)
     subprocess.run(
-        ["gcc", "-shared", "-fPIC", "-o", str(_SHIM_SO), str(src), "-ldl"],
+        ["gcc", "-shared", "-fPIC", "-o", str(so), str(src), "-ldl"],
         check=True,
         capture_output=True,
     )
     src.unlink()
-    return _SHIM_SO
+    _shim_so = so
+    return _shim_so
 
 
 

.claude/skills/document-skills/pptx/SKILL.md

@@ -3,7 +3,7 @@ name: pptx
 description: "Use this skill any time a .pptx or .potx file is involved in any way — as input, output, or both. This includes: creating slide decks, pitch decks, or presentations; reading, parsing, or extracting text from any .pptx or .potx file (even if the extracted content will be used elsewhere, like in an email or summary); editing, modifying, or updating existing presentations; combining or splitting slide files; working with templates (.potx), layouts, speaker notes, or comments. Trigger whenever the user mentions \"deck,\" \"slides,\" \"presentation,\" or references a .pptx or .potx filename, regardless of what they plan to do with the content afterward. If a .pptx or .potx file needs to be opened, created, or touched, use this skill."
 license: Proprietary. LICENSE.txt has complete terms
 metadata:
-  version: "2.0"
+  version: "2.1"
   skill-author: Anthropic, PBC
   source: https://github.com/anthropics/skills/tree/main/skills/pptx
 ---

.claude/skills/document-skills/pptx/scripts/office/soffice.py

@@ -15,8 +15,10 @@
 callers that build their own argv (they must pass -env:UserInstallation too).
 """
 
+import atexit
 import contextlib
 import os
+import shutil
 import socket
 import subprocess
 import tempfile
@@ -73,7 +75,13 @@ def run_soffice(args: Iterable[str], **kwargs) -> subprocess.CompletedProcess:
 
 
 
-_SHIM_SO = Path(tempfile.gettempdir()) / "lo_socket_shim.so"
+#: Compiled once per process, not cached on disk between runs. An earlier version
+#: built the shim at a fixed /tmp/lo_socket_shim.so and reused whatever was already
+#: there, which let any local user pre-plant a shared object at that predictable
+#: path and get it LD_PRELOADed into every subsequent soffice run. mkdtemp gives an
+#: unpredictable directory created 0700 and owned by us, so neither the .c we
+#: compile nor the .so we load can be swapped by another user.
+_shim_so: Path | None = None
 
 
 def _needs_shim() -> bool:
@@ -86,18 +94,24 @@ def _needs_shim() -> bool:
 
 
 def _ensure_shim() -> Path:
-    if _SHIM_SO.exists():
-        return _SHIM_SO
+    global _shim_so
+    if _shim_so is not None and _shim_so.exists():
+        return _shim_so
 
-    src = Path(tempfile.gettempdir()) / "lo_socket_shim.c"
+    shim_dir = Path(tempfile.mkdtemp(prefix="lo-shim-"))
+    atexit.register(shutil.rmtree, shim_dir, True)
+
+    src = shim_dir / "lo_socket_shim.c"
+    so = shim_dir / "lo_socket_shim.so"
     src.write_text(_SHIM_SOURCE)
     subprocess.run(
-        ["gcc", "-shared", "-fPIC", "-o", str(_SHIM_SO), str(src), "-ldl"],
+        ["gcc", "-shared", "-fPIC", "-o", str(so), str(src), "-ldl"],
         check=True,
         capture_output=True,
     )
     src.unlink()
-    return _SHIM_SO
+    _shim_so = so
+    return _shim_so