ArXiv Research

PassAudited by ClawScan on May 1, 2026.

Overview

This skill appears to do what it says: search arXiv and download papers, with only normal external package and file-download considerations.

This looks safe for normal research use. Before installing, be aware that it requires the third-party `arxiv` Python package and that downloading papers will save PDF files under your Downloads folder.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing the skill may require installing a third-party Python package, so the behavior depends partly on that package and the package source.

Why it was flagged

The skill depends on the external `arxiv` Python package installed from PyPI. This is expected for the stated purpose, but the dependency is not pinned to a specific version.

Skill content
metadata: {"openclaw": {"emoji": "📚", "requires": {"bins": ["python"], "pip": ["arxiv"]}, "homepage": "https://arxiv.org"}}
...
pip install arxiv
Recommendation

Install dependencies from a trusted Python environment and consider pinning or reviewing the `arxiv` package version if used in sensitive environments.

What this means

Using the download feature will create files on the user's machine under the Downloads folder.

Why it was flagged

The download command creates a local directory and saves PDFs there. This is disclosed and purpose-aligned, but it is still a local file-writing capability.

Skill content
download_dir = os.path.join(os.path.expanduser("~"), "Downloads", "arxiv")
os.makedirs(download_dir, exist_ok=True)
...
path = paper.download_pdf(dirpath=download_dir, filename=f"{arxiv_id}.pdf")
Recommendation

Use the download command only for intended papers and periodically review the download folder if storage or file provenance matters.