Research Daily Push

每天自动检索指定领域最新arXiv论文，生成结构化总结并推送科研文献更新。

Security Scan

The skill's code and instructions match its stated purpose (fetch arXiv, summarize, and push), but there are minor inconsistencies (packaging metadata vs. Python implementation and optional push-related env vars not declared) and the provided source was truncated so full push behavior couldn't be inspected.

Purpose & Capability

Name/description state: daily arXiv retrieval, summarize, and push. The Python code shown implements arXiv querying, analysis, and report generation which aligns with the stated purpose. Minor mismatch: package.json (Node-style) lists a 'requests' dependency (Python) and 'main' points to the Python file — inconsistent packaging but not evidence of malicious intent.

Instruction Scope

SKILL.md stays on-purpose (how to invoke, cron example, what results to produce). It does not instruct reading unrelated system files. The README documents optional env vars for push channels. The truncated source prevents confirmation of the exact push implementation (which endpoints are called and what data is sent), but the visible code only contacts arXiv.

Install Mechanism

No install spec is provided (instruction-only with included code), so nothing arbitrary is downloaded at install time. This is low-risk. The presence of package.json is odd but not an active install instruction in the registry metadata.

Credentials

Registry metadata lists no required env vars, but README documents optional ARXIV_API_KEY, PUSH_CHANNEL, and PUSH_TARGET. That is reasonable for push functionality, but because env vars are not declared as required, users should verify which are actually read by the script. If the push implementation posts to external services, it will need credentials — those are proportional but must be confirmed.

Persistence & Privilege

The skill does not request always:true and is user-invocable only. It does not claim to modify other skills or system-wide settings. Cron setup is done via openclaw CLI (user action). No elevated persistence requested.

Assessment

This skill appears to do what it says (query arXiv, summarize papers, push results). Before installing: 1) Inspect the remainder of research_push.py (the delivered file was truncated here) to confirm how push is implemented — check which external endpoints are called and what credentials are read. 2) If you plan to enable push (Feishu/WeChat/email), only provide credentials (PUSH_CHANNEL/PUSH_TARGET/API keys) you trust and scope those accounts appropriately. 3) The package.json vs Python mismatch is likely harmless but review the repository for any unexpected scripts. 4) If you need higher assurance, run the skill in a restricted environment or sandbox and monitor outgoing network calls to verify it only contacts arXiv and intended push endpoints.

⚠️ 已整合 - 请使用 research 统一入口

本技能保留用于向后兼容，功能已整合到 research 统一入口技能

推荐使用： research daily [领域] 或直接使用本技能（自动转发）

---

Research Daily Push（兼容层）

科研文献每日推送 - 每天自动检索指定领域最新 arXiv 论文，生成结构化总结并推送。

迁移指南

新用法：

research daily RTHS
research daily 结构健康监测
research daily 深度学习 振动控制

旧用法（仍然可用）：

daily RTHS

特点

• ✅ 自动检索最近 24-48 小时论文
• ✅ 结构化总结（标题/作者/核心创新点/方法/结果）
• ✅ 重要性评估（引用潜力/创新度/相关性打分 1-10）
• ✅ Markdown 表格 + 详细总结
• ✅ 支持飞书/微信/邮件推送

执行流程

1. 读取用户研究方向
2. 检索论文（arXiv API，最近 2 天，5-10 篇）
3. 论文分析（标题/作者/创新点/方法/结果/重要性评分）
4. 生成推送（概览 + 详细列表+PDF 链接）

定时任务设置

openclaw cron add --name "daily-paper-push" --cron "0 8 * * *" --message "推送今日最新文献"