Daily Paper Digest

PassAudited by ClawScan on May 1, 2026.

Overview

This appears to be a benign paper-digest skill that fetches public paper listings, though it installs Python packages, contacts external websites, and can run on a daily schedule.

This skill is reasonable for a daily AI paper digest. Before installing, verify the package source or repository, confirm the scheduled daily run is desired, and make sure outbound access to arXiv and HuggingFace is acceptable in your environment.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Users have less provenance assurance and may install dependency versions selected by the installer rather than a fully locked package set.

Why it was flagged

The declared source is not verified, the homepage appears to be a placeholder, and the registry install specification names packages without versions, although requirements.txt does pin versions.

Skill content
Source: unknown; Homepage: https://github.com/your-username/daily-paper-digest; Install specifications: uv | package: arxiv, requests, beautifulsoup4, feedparser
Recommendation

Prefer a verified repository URL and a locked or pinned install path before relying on this in a sensitive environment.

What this means

Installing and running the skill will contact external paper websites to retrieve public content.

Why it was flagged

The skill performs outbound HTTP requests to fetch paper listings; this is expected for the stated digest function.

Skill content
self.base_url = "https://huggingface.co/papers"
response = requests.get(self.base_url, headers=self.headers, timeout=10)
Recommendation

Use it only where outbound access to arXiv and HuggingFace is acceptable, and review network policy if running it in a restricted environment.

NoteHigh Confidence
ASI10: Rogue Agents
What this means

If enabled, the skill can run automatically each day and generate a digest without a manual prompt at that time.

Why it was flagged

The skill is configured for automatic daily execution through the scheduler, which matches its daily digest purpose and is disclosed.

Skill content
"type": "scheduled",
"schedule": "0 9 * * *",
"entry": "main.py"
Recommendation

Confirm you want the scheduled behavior, and adjust or disable the schedule if you only want manual invocation.