Research Paper Push
PassAudited by ClawScan on May 10, 2026.
Overview
The skill is coherent for scheduled research-paper alerts, but it intentionally stores subscription data and creates cron jobs, so users should confirm schedules and keep local data private.
Before installing or using this skill, confirm that you want persistent scheduled paper alerts. Review the recipient ID, timezone, schedule, journals, and topics before creating a subscription. Keep generated `data/*.json` files private, and list/remove subscriptions when you no longer want the cron job to run.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may create a recurring task that keeps running and sending paper summaries until removed.
The skill deliberately creates persistent scheduled jobs. This matches the paper-alert purpose, but scheduled activity can continue after the initial user interaction.
`add` — create a subscription and register a cron job.
Only create subscriptions after confirming recipient, time, timezone, journals, and topics; periodically list and remove cron jobs/subscriptions that are no longer needed.
Local generated files may reveal a user's research interests or message recipient identifiers if shared or published.
The script stores persistent local subscription state, which can include recipient IDs, topics, journals, schedule, and last-checked dates.
DATA_DIR = Path("data")
SUBSCRIPTIONS_FILE = DATA_DIR / "subscriptions.json"Keep generated data files private, do not publish `data/*.json`, and remove subscriptions/data when they are no longer needed.
Research topics, journal preferences, and optional contact email may be sent to OpenAlex during tests or scheduled runs.
The script sends user-configured research topics and date filters to the OpenAlex API, which is central to the skill's purpose and disclosed in SKILL.md.
with urllib.request.urlopen(req, timeout=25) as resp:
return json.loads(resp.read().decode("utf-8"))Use the skill only for topics you are comfortable querying through OpenAlex, and avoid placing secrets or private channel credentials in command options or generated files.