bioRxiv access using API with support of time period and category

PassAudited by ClawScan on May 1, 2026.

Overview

This skill appears to fetch public bioRxiv preprint metadata through a simple Python script, with no credentials, local data access, persistence, or destructive actions shown.

This skill looks safe for fetching public bioRxiv metadata. Before installing, be aware that it will make network requests to api.biorxiv.org and that the registry source/homepage information is limited; no authentication or local data access is indicated.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The category and date range used for paper lookup will be sent to bioRxiv's public API.

Why it was flagged

The script makes outbound requests to a hardcoded bioRxiv API endpoint to retrieve public paper metadata, which matches the stated purpose and does not involve credentials or local data.

Skill content
BIO_RXIV_API = "https://api.biorxiv.org/details/biorxiv"
Recommendation

Use it for public literature searches and avoid including sensitive private information in prompts or arguments intended for API lookup.

What this means

Users may need to verify they trust the package source and have Python available, but the artifacts do not show unsafe installation behavior.

Why it was flagged

The registry metadata provides limited upstream provenance and does not declare Python even though the skill runs a Python script; however, no hidden installer, remote script download, or external dependency is shown.

Skill content
Source: unknown; Homepage: none; Required binaries (all must exist): none
Recommendation

Confirm the package origin is acceptable for your environment and ensure Python is available before use.