Arxiv Watcher
PassAudited by ClawScan on May 1, 2026.
Overview
The skill appears to match its purpose: it fetches public arXiv paper data and keeps a local starred-paper list, with only ordinary provenance, network, and local-persistence considerations.
This skill looks safe for normal arXiv browsing and bookmarking. Before installing, be aware that it contacts arXiv, displays external paper text, and saves your starred papers locally in assets/starred.json; verify the publisher/source if provenance matters to you.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Users have less information for independently verifying who maintains the skill or where its code originates.
The registry does not provide an upstream source or homepage for provenance checking, although the included artifacts themselves are simple and purpose-aligned.
Source: unknown Homepage: none
Inspect the included artifacts before use and prefer installing from publishers with clear source or homepage links when provenance is important.
Fetched paper titles or abstracts could theoretically be altered in transit before being shown to the agent or user.
The skill fetches public arXiv metadata from a fixed API endpoint using plaintext HTTP, which is expected for its purpose but provides weaker integrity protection than HTTPS.
ARXIV_API_URL = "http://export.arxiv.org/api/query"
Treat fetched paper text as untrusted content and, if maintaining the skill, use an HTTPS API endpoint if supported.
A user's starred-paper reading list remains on disk and may be visible to anyone or any process with access to the skill files.
The skill stores starred paper metadata in a persistent local JSON file, matching the documented reading-list feature.
STARRED_FILE = Path(__file__).parent.parent / "assets" / "starred.json"
Do not star papers you consider private on a shared machine, or delete assets/starred.json when you no longer want the list retained.