← 返回 Skills 市场
arxiv watcher
作者
ModestyRichards
· GitHub ↗
· v1.0.0
· MIT-0
89
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install modesty-arxiv-watcher
功能描述
Search and summarize papers from ArXiv. Use when the user asks for the latest research, specific topics on ArXiv, or a daily summary of AI papers.
安全使用建议
This skill is small and consistent with its purpose, but it will automatically store summaries in memory/RESEARCH_LOG.md and may download PDFs when asked. Before installing, decide whether automatic persistent logging of viewed/summarized papers is acceptable for your workflow and whether any content you query could be sensitive. If you'd prefer not to keep persistent logs, ask the skill author (or modify SKILL.md) to make appending optional or to prompt before writing. Also test with non-sensitive queries first and inspect memory/RESEARCH_LOG.md so you know what is being stored.
功能分析
Type: OpenClaw Skill
Name: modesty-arxiv-watcher
Version: 1.0.0
The skill is designed to search and summarize ArXiv papers but contains a shell injection vulnerability in `scripts/search_arxiv.sh`. The script passes the `$QUERY` variable directly into a double-quoted string within a `curl` command, which allows for command substitution (e.g., using `$(...)`) if the input is not properly sanitized by the calling agent. While the workflow in `SKILL.md` and the metadata in `_meta.json` appear benign and aligned with the stated purpose, the lack of input validation in the shell script presents a security risk.
能力评估
Purpose & Capability
Name/description match the implementation: a small bash script queries the public arXiv API and SKILL.md describes searching, summarizing, and optionally fetching PDFs. All requested artifacts (no creds, no external services) are consistent with an arXiv watcher.
Instruction Scope
The runtime instructions mandate automatically appending every discussed paper (title, authors, date, summary, link) to memory/RESEARCH_LOG.md. That is coherent with 'long-term tracking' but is a persistent side effect users should expect. It also suggests using 'web_fetch' to download PDFs for deeper extraction — expected for deeper summaries but means the skill may download arbitrary PDF content from arXiv links when invoked.
Install Mechanism
No install/spec or third-party downloads; the included script is a tiny curl invocation against the official export.arxiv.org API. Low install risk.
Credentials
No environment variables, secrets, or external credentials requested. The skill does not require unrelated credentials or config paths.
Persistence & Privilege
The skill is not always-enabled and can be invoked by the user, but it requires write access to memory/RESEARCH_LOG.md and mandates appending entries. Writing to agent memory is a normal pattern but is a persistent capability you should accept explicitly.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install modesty-arxiv-watcher - 安装完成后，直接呼叫该 Skill 的名称或使用
/modesty-arxiv-watcher触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release: Enables searching and summarizing ArXiv papers.
- Search for research papers on ArXiv by keyword, author, or category.
- Automatically summarize abstracts and provide concise explanations.
- Save every discussed paper to `memory/RESEARCH_LOG.md` for tracking.
- Optionally extract more details from PDFs when requested.
- Includes clear workflow and example user prompts.
元数据
常见问题
arxiv watcher 是什么？
Search and summarize papers from ArXiv. Use when the user asks for the latest research, specific topics on ArXiv, or a daily summary of AI papers. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 89 次。
如何安装 arxiv watcher？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install modesty-arxiv-watcher」即可一键安装，无需额外配置。
arxiv watcher 是免费的吗？
是的，arxiv watcher 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
arxiv watcher 支持哪些平台？
arxiv watcher 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 arxiv watcher？
由 ModestyRichards（@modestyrichards）开发并维护，当前版本 v1.0.0。
推荐 Skills