Automates the process of extracting reusable skill code from arXiv papers. Use this skill to turn paper insights into actual OpenClaw skills.

Before installing or running this skill: - Inspect the workspace 'memory/evolution/pending_skill_task.json' (if present) since the skill will read it and may write back status and extracted content. - Ensure you trust or inspect the sibling module arxiv-paper-reviews/paper_client.js that index.js requires — that file is not included and determines how papers are fetched (network calls, remote endpoints, credentials). - Run the skill in a sandbox or isolated workspace first (not in a production project) to see what files it creates under workspace_root/skills and what it writes to memory/evolution. - Note the SKILL.md usage examples path mismatch and that test.js calls main() without args (it will throw unless a pending task exists); provide a paper key when invoking (node index.js <paper_key>) to avoid accidental reads. - If you plan to use this on a shared agent, verify the agent workspace does not contain secrets or sensitive configs at the paths the skill touches. Additional information that would raise confidence to 'high': the missing arxiv-paper-reviews/paper_client.js included or documented, and a clear description of expected workspace layout (what WORKSPACE_ROOT should be) or modification to restrict operations to the skill's own directory.

Type: OpenClaw Skill Name: arxiv-skill-extractor Version: 1.0.0 The skill is designed to generate new OpenClaw skills from arXiv papers. However, the `renderSkillMarkdown` function in `index.js` directly interpolates unsanitized content from the `paper` object (e.g., `paper.title`, `paper.abstract`) into the body of the *generated* `SKILL.md` file. This creates a significant prompt injection vulnerability in the newly generated skill. If a malicious arXiv paper (or a compromised `arxiv-paper-reviews` service) provides crafted content, the generated `SKILL.md` could contain instructions that trick the OpenClaw agent into performing unauthorized actions when it later processes that generated skill. This is a critical vulnerability, classifying the skill as suspicious.