Arena Research

ReviewAudited by ClawScan on May 10, 2026.

Overview

The skill is meant for read-only Are.na research, but it tells the agent to load a global environment file and run a missing, unreviewed Bun script, so credential handling and runtime behavior are not clearly bounded.

Install only if you are comfortable reviewing or supplying the missing Are.na CLI code yourself. Prefer setting only a scoped `ARENA_ACCESS_TOKEN` for this skill rather than sourcing a global environment file that may contain unrelated secrets.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If used as written, the helper process may receive more local secrets than it needs, not just an Are.na access token.

Why it was flagged

The skill instructs loading a broad global environment file and documents authenticated Are.na features, while the registry metadata declares no environment variables or credentials. Loading all global environment variables is broader than a scoped Are.na token.

Skill content
source ~/.config/env/global.env ... `--scope all|my|following` ... `my`/`following` require auth ... Requires `ARENA_ACCESS_TOKEN`.
Recommendation

Use a narrowly scoped environment file or explicit `ARENA_ACCESS_TOKEN` only, and declare the credential requirement in metadata.

What this means

The skill may not work as packaged, or a user/agent may end up running unreviewed local code with access to the loaded environment.

Why it was flagged

The skill relies on a referenced Bun script and API reference file, but the provided manifest contains only SKILL.md and no install spec or code files. The runtime behavior therefore cannot be reviewed from the supplied artifacts.

Skill content
For API details ... read `references/arena-api.md`. ... `bun run arena-search.ts search "<query>" [options]`
Recommendation

Include the referenced script and documentation in the package, pin any dependencies, and avoid instructing execution of files that are not part of the reviewed artifact.

What this means

Using the skill may cause the agent to run local shell commands for searches and file output.

Why it was flagged

The skill is designed around local CLI execution. That is consistent with the documented workflow, but users should notice that the agent is expected to run local commands rather than only provide written guidance.

Skill content
All commands run from this skill directory: ... `bun run arena-search.ts search "<query>" [options]`
Recommendation

Review commands before execution and ensure the referenced script is present, trusted, and limited to the documented Are.na research behavior.