ArXiv Watcher
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: arxiv-watcher Version: 1.0.0 This skill bundle is classified as benign. The `SKILL.md` outlines a clear purpose to search and summarize ArXiv papers, including saving summaries to `memory/RESEARCH_LOG.md` and using `web_fetch` for PDF links, all of which align with its stated function. The `scripts/search_arxiv.sh` script uses `curl` to query the official ArXiv API (`export.arxiv.org`), which is a legitimate network call. There is no evidence of data exfiltration to unauthorized endpoints, malicious execution, persistence mechanisms, or prompt injection attempts against the agent that would lead to unauthorized actions or access to unrelated sensitive data.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Search terms and paper IDs may be visible to ArXiv when the skill is used.
The helper sends the user's search query to the ArXiv API. This is expected for an ArXiv search skill and is not hidden, but it is still an external network data flow.
curl -sL "https://export.arxiv.org/api/query?search_query=all:$QUERY&start=0&max_results=$COUNT&sortBy=submittedDate&sortOrder=descending"
Use it for intended ArXiv research searches, and avoid entering sensitive unpublished topics if you do not want those queries sent to ArXiv.
The skill may not work on systems without curl, and users should be aware of the helper dependency.
The artifact includes a helper script that depends on curl, while the registry requirements declare no required binaries. This is a small metadata/dependency mismatch rather than suspicious behavior.
# Use curl to query ArXiv API curl -sL
Confirm curl is available before use, or update the skill metadata to declare the curl dependency.
A local long-term log of papers you discuss may be created and retained.
The skill explicitly stores paper discussions in a persistent memory file. The scope and file path are disclosed, but the saved log may reveal research interests and can be reused later.
**MANDATORY**: Append the title, authors, date, and summary of any paper discussed to `memory/RESEARCH_LOG.md`.
Review or delete memory/RESEARCH_LOG.md if it contains sensitive research interests, and consider making logging optional if privacy is important.