arXiv Master Search
v0.1.0支持基于关键词、作者、日期和分类的arXiv论文检索，导出元数据，批量下载PDF及生成论文摘要。
⭐ 0· 213·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (arXiv search, download, metadata export, summarization) match the provided Python modules (search.py, download.py, metadata.py, summarize.py, batch_search.py). Declared requirements (none) and required binaries/env are empty — appropriate because the tool uses standard Python libraries and CLI parameters rather than platform secrets. The declared functionality explains the packages in requirements.txt (arxiv, requests, pandas, PyPDF2, pdfminer, etc.), which are proportionate to the stated purpose.
Instruction Scope
SKILL.md instructs the agent to pip install the requirements, run scripts from the scripts/ directory, and supply CLI arguments. The runtime instructions operate on local inputs/outputs (examples, ids.txt, output/ folders) and arXiv endpoints (arxiv.Client and arxiv.org/pdf/*). There are no instructions to read unrelated system files, environment secrets, or transmit data to unexpected external endpoints. The only potentially sensitive runtime option is the ability in download.py to disable SSL verification (a command-line flag), which is documented in the code.
Install Mechanism
There is no registry 'install' spec; the SKILL.md instructs users to pip install -r requirements.txt. This is low-to-moderate risk: dependencies are common PyPI packages appropriate for the task. Users should review requirements.txt before installation and install inside a virtualenv. No downloads from arbitrary URLs or archive extraction steps are present in the repo.
Credentials
The skill does not declare or require any environment variables or credentials. The code does not appear to reference API keys or other secret env vars. The README and requirements mention optional OpenAI-related packages commented out; those are not required by default. If you later enable OpenAI functionality, you would need to provide API credentials — currently not requested.
Persistence & Privilege
always is false and the skill does not request permanent system presence. The scripts create and write to local output/ directories (pdfs, metadata, summaries) as expected for this functionality. There is no code that modifies other skills or global agent configuration.
Assessment
This package appears to do exactly what it claims: search arXiv, download PDFs, export metadata, and generate simple summaries. Before installing: 1) Inspect requirements.txt and install inside a virtual environment (venv) to limit scope. 2) Review scripts/utils.py (logging and any helpers) for unexpected behavior if you want extra assurance. 3) Be aware that download.py can disable SSL verification via a flag — do not use that flag unless you understand the risk. 4) Running large batch downloads can use a lot of bandwidth and disk space and should respect arXiv rate limits (the code includes rate-limiting options). 5) The README mentions optional OpenAI/transformer dependencies commented out — do not provide API keys unless you intentionally enable that feature and trust the code that uses them. Overall this skill is internally coherent; follow best practices (venv, review dependencies, limit parallelism) when using it.Like a lobster shell, security has layers — review code before you run it.
latestvk972fm0pr5sdhxd2qb1s0619h182stcc
License
MIT-0
Free to use, modify, and redistribute. No attribution required.