ArXiv Watcher
v1.0.0Search and summarize papers from ArXiv. Use when the user asks for the latest research, specific topics on ArXiv, or a daily summary of AI papers.
⭐ 1· 1.9k·3 current·3 all-time
byRubén Fernández Boullón@rubenfb23
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
Name/description match the implementation: a small bash script queries the ArXiv API and SKILL.md describes searching and summarizing. No unrelated credentials, binaries, or installs are requested. The 'save to memory' feature is coherent with the stated 'long-term tracking' capability, though it is not declared as a separate permission.
Instruction Scope
SKILL.md contains concrete runtime steps (call scripts/search_arxiv.sh, parse XML, present results) which are appropriate, but it also requires a MANDATORY append of every discussed paper to memory/RESEARCH_LOG.md and instructs the agent to use web_fetch on PDF links for deeper extraction. The mandatory persistent write and arbitrary PDF fetchs extend the agent's IO/networking beyond simple querying and summarization and may capture or store content the user did not explicitly approve.
Install Mechanism
No install spec; this is instruction-only with one small shell script that uses curl to call the public ArXiv API. Low installation risk and no downloads from untrusted hosts.
Credentials
The skill requests no environment variables, credentials, or config paths. That is proportionate to its stated purpose.
Persistence & Privilege
Although always:false (so it won't be force-included), the skill mandates writing to a persistent memory file (memory/RESEARCH_LOG.md) for every paper discussed. Automatic, unconditional writes to persistent agent memory are a notable privilege: they can accumulate data without repeated user consent and may expose sensitive content if the memory is later accessed or shared.
What to consider before installing
This skill appears to do what it advertises (it queries ArXiv and summarizes results), but be aware it will automatically append summaries to memory/RESEARCH_LOG.md and can fetch PDFs for deeper extraction. Before installing or enabling it: (1) confirm where memory/RESEARCH_LOG.md is stored and whether that storage is private; (2) require the skill to ask for explicit user approval before saving any summary (or make saving optional); (3) consider disabling or restricting the 'web_fetch' PDF download behavior unless you trust the sources and understand the implications; (4) if you share this agent or its memory, understand that saved summaries could be visible to others; (5) because the skill is from an unknown source, review or sandbox the skill (or fork and remove the mandatory save) if you want to reduce persistent-write behavior. These precautions will reduce privacy and data-accumulation risks.Like a lobster shell, security has layers — review code before you run it.
latestvk97be1ha174apcx95hcpdpntt17zzh4z
License
MIT-0
Free to use, modify, and redistribute. No attribution required.