Arxiv Osiris

PassAudited by ClawScan on May 1, 2026.

Overview

This skill appears aligned with its stated purpose of searching arXiv and downloading papers, with only minor, disclosed installation and file-download considerations.

This appears safe for its stated purpose. Before installing, verify the Python dependency source/version, and remember that searches are sent to arXiv while downloads save PDF files locally.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing the dependency fetches third-party code from the Python package ecosystem.

Why it was flagged

The skill depends on an external PyPI package and does not pin a package version. This is expected for an arXiv integration, but users should ensure they install the intended dependency.

Skill content
pip install arxiv
Recommendation

Install in a virtual environment and consider pinning or verifying the 'arxiv' package version before use.

What this means

Using the download command will create PDF files locally from arXiv.

Why it was flagged

The tool can download PDFs into the user's Downloads folder. This is disclosed and purpose-aligned, and the arXiv ID is validated before download.

Skill content
download_dir = os.path.join(os.path.expanduser("~"), "Downloads", "arxiv") ... paper.download_pdf(dirpath=download_dir, filename=f"{arxiv_id}.pdf")
Recommendation

Download only papers you intend to keep, and review downloaded PDFs as you would any file from the internet.