arXiv Master Search

PassAudited by ClawScan on May 10, 2026.

Overview

This skill appears to be a purpose-aligned arXiv search/download/metadata tool, with ordinary file and network activity but no clear suspicious behavior in the provided artifacts.

This looks reasonable for academic arXiv research. Install it in an isolated Python environment, review the dependency versions, and direct downloads/exports to a safe folder. Be cautious with batch downloads, custom log paths, overwrite options, and any option that disables SSL verification.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing the skill may pull newer dependency versions than the author tested.

Why it was flagged

The dependency file uses lower-bound version ranges rather than exact pinned versions or hashes, so future installs may resolve to different package versions.

Skill content
arxiv>=1.4.8
requests>=2.28.0
pandas>=1.5.0
PyPDF2>=3.0.0
pdfminer.six>=20221105
Recommendation

Install in a virtual environment and consider pinning or reviewing resolved package versions before use.

What this means

The skill can create or overwrite files in the chosen output directory and consume disk/network resources during batch downloads.

Why it was flagged

The download module performs network requests and writes PDF files locally, which is expected for a paper downloader but is still a meaningful local-file action.

Skill content
response = self.session.get(
                pdf_url,
                stream=True,
                verify=self.verify_ssl,
                timeout=60,
            )
...
with open(filepath, "wb") as f:
Recommendation

Use a dedicated output directory, keep SSL verification enabled, and avoid overwrite options unless you intend to replace existing files.