arxiv-survey

v1.0.0

Survey arXiv papers from a given year to present on a specific theme. Automatically categorizes papers, translates abstracts to Chinese, and generates a stru...

0· 60·0 current·0 all-time
byJiakai Xu@6eanut
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description match the provided files: SKILL.md describes searching arXiv, categorizing, translating abstracts to Chinese, and generating a markdown report. The included script queries the arXiv API and generates a placeholder report file. No unrelated credentials, binaries, or network endpoints are requested.
Instruction Scope
SKILL.md promises categorization and Chinese translation; the bundled script only fetches arXiv entries and writes a basic report skeleton. This is coherent if the agent (LLM) performs categorization and translation at runtime, but the implementation gap should be noted: the script does not download PDFs or perform translations itself. The instructions do not ask the agent to read unrelated files or exfiltrate data.
Install Mechanism
No install spec — instruction-only skill with a small shell script. Nothing is downloaded from external or untrusted URLs. Lowest-risk install posture.
Credentials
The skill requires no environment variables, credentials, or config paths. Translation is expected to be handled by the agent/model (no external translation API keys requested), which is proportionate for the claimed functionality.
Persistence & Privilege
The skill does not request always:true and does not modify other skills or system settings. It runs as an on-demand skill; autonomous invocation is enabled by default but not excessive here.
Assessment
This skill appears coherent and not malicious, but note a few practical points before installing: - Functionality gap: The included script only queries arXiv and writes a skeleton markdown file; categorization and Chinese translation are not implemented in the script and are expected to be performed by the agent/LLM at runtime. If you expect the script to perform these steps locally, it currently does not. - Dependencies: The script uses curl and iconv and uses grep -oP (PCRE grep). Ensure your environment has these tools (some systems' grep lacks -P). Missing dependencies will cause runtime failures but are not security issues. - Network usage: The script queries https://export.arxiv.org. If you (or the agent) additionally fetch full PDFs for context, that will generate extra network traffic and may hit arXiv rate limits — be mindful of API usage. - Parsing fragility: The script uses regex-based XML parsing (grep) and limits results (MAX_RESULTS=50 and head -20). It may miss or mis-parse entries; review outputs for correctness. - Translation/Privacy: Translations are likely performed by the agent/model; if the agent uses an external translation API (not included here), it would require credentials — none are requested now. If you plan to let the agent call external services for translation, consider whether sharing paper text with those services is acceptable. If these behaviors are acceptable, the skill is coherent. If you require local, reproducible categorization/translation without the model or third-party APIs, request or implement those steps explicitly before relying on the tool.

Like a lobster shell, security has layers — review code before you run it.

latestvk97axkdhfhfg5v3waj9hdt70m584mpfv

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments