Arxiv Search Collector

• Analyzed: May 12, 2026, 4:02 AM
• Findings: 1
• Version: 0.1.1
• Hash: 03fcc15daa4a1ff4cd41cec2a5cc3f072748f53c3a873cbbb21ba8f9914ea119
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkills bundle is classified as benign. All scripts and documentation align with the stated purpose of collecting arXiv paper metadata. The Python scripts (`init_collection_run.py`, `fetch_queries_batch.py`, `fetch_query_metadata.py`, `merge_selected_papers.py`) perform expected file system operations (creating/deleting directories, writing/reading JSON/Markdown files within a designated run directory) and network requests (to the official arXiv API). Input sanitization (e.g., `slugify` for paths, `urlencode` for API queries, `subprocess.run` with a list of arguments) and file system safeguards (e.g., `is_relative_to` check before `shutil.rmtree`) are appropriately implemented. There is no evidence of data exfiltration, unauthorized command execution, persistence mechanisms, obfuscation, or prompt injection attempts in the `SKILL.md` or other documentation.