Security audit
Security checks for vulnerabilities and agentic risk
This ArXiv research helper is purpose-aligned and disclosed, with a privacy-relevant local research log users should be aware of before use.
Install only if you are comfortable with discussed papers being saved locally in memory/RESEARCH_LOG.md for long-term tracking. Avoid using it for confidential research topics unless you are prepared to review or delete that log yourself.
The skill documents use of a shell script (scripts/search_arxiv.sh) but does not declare any tool scope or permissions boundary. This creates an authorization and transparency gap: an agent may invoke shell capabilities not clearly surfaced to reviewers or users, increasing the chance of unintended command execution or overbroad tool access.
The stated purpose of the skill is searching and summarizing ArXiv papers, but it also performs persistent local logging to memory/RESEARCH_LOG.md. This is a scope expansion beyond user-visible functionality and can cause silent retention of user interests, research topics, or sensitive queries without informed consent.
Automatic saving to memory/RESEARCH_LOG.md is presented as a capability without warning that the action creates persistent local records. Users may reasonably expect transient summarization, so undisclosed retention can expose sensitive research interests or accumulate data that later becomes accessible to other skills or users.
The workflow mandates automatic appends to a memory file for any discussed paper, yet this write behavior is not part of the declared search-and-summary purpose. Hidden side effects like persistent file modification increase privacy risk and make the skill behave beyond its advertised scope.
Marking the append to memory as MANDATORY without a persistence warning normalizes silent file writes as part of routine operation. This removes user choice and increases the risk of unwanted data retention, especially for confidential or proprietary research topics.
All example invocations are written in Spanish, which suggests a language expectation, but the skill does not explicitly state that users may choose their preferred language. This can be a locale/language policy issue when a skill appears to default to a specific language without opt-in.
No suspicious patterns detected.
