Search and summarize papers from ArXiv. Use when the user asks for the latest research, specific topics on ArXiv, or a daily summary of AI papers.
Security Analysis
medium confidenceThe skill does what it says (search ArXiv and summarize), but it mandatorily appends results to a persistent memory file and can fetch PDFs—behaviors that are potentially privacy-sensitive and should require explicit user consent.
Name/description match the implementation: a small bash script queries the ArXiv API and SKILL.md describes searching and summarizing. No unrelated credentials, binaries, or installs are requested. The 'save to memory' feature is coherent with the stated 'long-term tracking' capability, though it is not declared as a separate permission.
SKILL.md contains concrete runtime steps (call scripts/search_arxiv.sh, parse XML, present results) which are appropriate, but it also requires a MANDATORY append of every discussed paper to memory/RESEARCH_LOG.md and instructs the agent to use web_fetch on PDF links for deeper extraction. The mandatory persistent write and arbitrary PDF fetchs extend the agent's IO/networking beyond simple querying and summarization and may capture or store content the user did not explicitly approve.
No install spec; this is instruction-only with one small shell script that uses curl to call the public ArXiv API. Low installation risk and no downloads from untrusted hosts.
The skill requests no environment variables, credentials, or config paths. That is proportionate to its stated purpose.
Although always:false (so it won't be force-included), the skill mandates writing to a persistent memory file (memory/RESEARCH_LOG.md) for every paper discussed. Automatic, unconditional writes to persistent agent memory are a notable privilege: they can accumulate data without repeated user consent and may expose sensitive content if the memory is later accessed or shared.
Guidance
This skill appears to do what it advertises (it queries ArXiv and summarizes results), but be aware it will automatically append summaries to memory/RESEARCH_LOG.md and can fetch PDFs for deeper extraction. Before installing or enabling it: (1) confirm where memory/RESEARCH_LOG.md is stored and whether that storage is private; (2) require the skill to ask for explicit user approval before saving any summary (or make saving optional); (3) consider disabling or restricting the 'web_fetch' PDF download behavior unless you trust the sources and understand the implications; (4) if you share this agent or its memory, understand that saved summaries could be visible to others; (5) because the skill is from an unknown source, review or sandbox the skill (or fork and remove the mandatory save) if you want to reduce persistent-write behavior. These precautions will reduce privacy and data-accumulation risks.
Latest Release
v1.0.0
Initial version: Search and summarize ArXiv papers with local research logging.
More by @rubenfb23
Published by @rubenfb23 on ClawHub
