Paper Recommendation

ReviewAudited by ClawScan on May 10, 2026.

Overview

The skill mostly matches paper discovery and briefing generation, but its daily workflow is pre-set to send messages to a hardcoded Telegram account and references a scheduled script path that may not be the reviewed skill.

Manual fetching and PDF review of public arXiv papers appears aligned with the skill's purpose. Before installing or enabling daily automation, replace or remove the hardcoded Telegram ID 8077045709, verify the cron command points to the installed paper-recommendation script, and avoid sending private documents or private notes through the sub-agent workflow.

Findings (5)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If the workflow is run or scheduled, paper briefings may be sent from your agent/account to that Telegram ID.

Why it was flagged

The daily workflow uses the agent's messaging integration to send output to a fixed Telegram target instead of a user-configured recipient.

Skill content
TELEGRAM_ID = "8077045709" ... 'clawdbot', 'message', 'send', '--target', TELEGRAM_ID, '--message', message
Recommendation

Do not enable the daily workflow as-is. Replace the Telegram ID with an explicit user-controlled setting, require confirmation before sending, or remove automatic delivery.

What this means

A daily job could run code outside the reviewed skill directory if that path exists on the user's system.

Why it was flagged

The scheduled command references an absolute jarvis-research path, while the reviewed skill is paper-recommendation with scripts/daily_workflow.py in the supplied manifest. Copying the cron could fail or execute a different local script.

Skill content
运行 python3 /home/ubuntu/skills/jarvis-research/scripts/daily_workflow.py
Recommendation

Verify and edit the cron command to point only to the installed, reviewed script path for this skill before enabling automation.

NoteHigh Confidence
ASI10: Rogue Agents
What this means

If enabled, the agent will run the paper workflow and attempt delivery every day.

Why it was flagged

The skill documents a persistent daily cron job. This is aligned with daily paper updates, but it continues running until the user disables it.

Skill content
clawdbot cron add ... --cron "0 10 * * *" ... --deliver --channel telegram --to 8077045709
Recommendation

Only add the cron job if you want recurring automation, know how to list/remove it, and have corrected the recipient and script path.

What this means

Sub-agent sessions may consume resources and receive the paper task context.

Why it was flagged

The workflow intentionally creates parallel sub-agents for review. The tasks are scoped to public arXiv papers, but users should notice the multi-agent execution model.

Skill content
clawdbot sessions spawn --task "<task>" --label "<name>" ... All sub-agents can run in parallel (default maxConcurrent: 8)
Recommendation

Keep sub-agent tasks limited to public paper content and reduce concurrency if resource usage or task isolation matters.

What this means

The skill will make outbound requests to arXiv and write downloaded PDFs under the configured papers directory.

Why it was flagged

The script invokes local command-line tools to fetch arXiv data and download PDFs. This is expected for the stated paper-discovery purpose.

Skill content
subprocess.run(['curl', '-sL', p['pdf_url'], '-o', str(pdf_path)], timeout=60)
Recommendation

Run it from a normal user account, ensure expected tools are installed, and monitor the papers directory for disk usage.