ClawHub

Arxiv Cli Tools

v0.0.1

Command-line tool to search, filter, and download arXiv papers by ID, author, category, or keyword without requiring API keys.

⭐ 1· 1.6k·7 current·7 all-time
byKGTAF@killgfat
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name and runtime instructions describe searching/downloading arXiv papers; SKILL.md only recommends installing the arxiv-cli-tools PyPI package and using its commands — nothing extraneous is requested.
✓
Instruction Scope
Instructions are limited to installation (pipx/pip) and running arxiv-cli search/download. They reference local download destinations (user-specified) and arXiv usage; they do not instruct reading unrelated system files, exporting credentials, or contacting unexpected endpoints.
ℹ
Install Mechanism
No install spec in the skill bundle (instruction-only). SKILL.md recommends installing from PyPI (pipx or pip), which is the expected and usual distribution method but carries the standard supply-chain risk of third-party packages — verify the PyPI project and consider using pipx/virtualenv.
✓
Credentials
The skill declares no required env vars, no credentials, and no config paths. This matches the stated functionality which does not need secrets or external credentials.
✓
Persistence & Privilege
always is false and the skill is user-invocable; it does not request permanent/system-wide presence or modify other skills. Autonomous invocation is allowed by platform default but the skill itself does not request elevated persistence.
Assessment
This is an instruction-only skill that tells you to install an arXiv CLI from PyPI and use it to search/download papers. Before installing: (1) verify the PyPI package (check the project page, maintainer, source repository, release history and README); (2) prefer pipx or a virtualenv to isolate the package; (3) review the package source if you have doubts; (4) be aware downloads go to whatever directory you specify — avoid running downloads as root or to system directories; (5) there are no credentials requested by the skill. If you want extra assurance, inspect the package code on its upstream repository or install in a disposable environment first.

Like a lobster shell, security has layers — review code before you run it.

latestvk9788jjc9rk5ty97gh69ge0zx580yyjr

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments