Orchestrates the continuous learning of new skills from arXiv papers. Use this to trigger a learning cycle, which fetches papers, extracts code/skills, and s...

This skill's stated purpose matches what the code mostly does, but there are two issues to consider before installing: (1) SKILL.md promises a 'commit'/'solidify' step and scheduled runs that the code does not implement — expect the skill to only extract, smoke-test, and record metadata unless additional code exists elsewhere. (2) The extractor supplies a smokeTestCommand which this skill executes via child_process.exec in the workspace root. If the extractor or paper_client modules (required from relative paths) are untrusted or can be influenced by external inputs, that command execution could run arbitrary shell commands with the agent's workspace permissions. Recommendations: only install if you audit or control the local modules ../arxiv-paper-reviews/paper_client and ../arxiv-skill-extractor; run the skill in an isolated sandbox or CI runner with limited filesystem/network permissions; add validation/whitelisting of smokeTestCommand (or run tests in a container); and reconcile the SKILL.md vs actual behavior (committing and scheduling) so you understand what will happen. If you cannot verify the extractor and paper_client code, treat this skill as risky and avoid granting it access to sensitive workspaces.

Type: OpenClaw Skill Name: arxiv-skill-learning Version: 1.0.0 The `arxiv-skill-learning` skill is classified as suspicious due to a critical shell injection vulnerability in `index.js`. The skill executes a `smokeTestCommand` generated by the `arxiv-skill-extractor` skill using `child_process.exec` without apparent input sanitization. This allows for arbitrary command execution on the host system if the `arxiv-skill-extractor` skill is compromised or intentionally malicious, as the command is run from the `WORKSPACE_ROOT` with broad access, enabling potential RCE.