[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"extension-skill-shoumikdc-arxiv-mcp-zh-CN":3,"guides-for-shoumikdc-arxiv-mcp":223},{"_creationTime":4,"_id":5,"children":6,"community":7,"display":9,"evaluation":21,"identity":192,"isFallback":197,"parentExtension":198,"providers":199,"relations":203,"repo":205,"workflow":219},1777999890864.4045,"k17dhangy7zd7hdz90rr1qvhgn865qpt",[],{"reviewCount":8},0,{"description":10,"installMethods":11,"name":12,"sourceUrl":13,"tags":14},"Extension from shoumikdc/arXiv-mcp",{},"arXiv MCP Server","https://github.com/shoumikdc/arXiv-mcp",[15,16,17,18,19,20],"arxiv","mcp","python","research","papers","feedparser",{"_creationTime":22,"_id":23,"extensionId":5,"locale":24,"result":25,"trustSignals":180,"workflow":190},1778005088200.8228,"kn76dayvnt1y3pda081chz2r59864t2a","en",{"checks":26,"evaluatedAt":170,"extensionSummary":171,"promptVersionExtension":172,"promptVersionScoring":173,"rationale":174,"score":175,"summary":176,"tags":177,"targetMarket":178,"tier":179},[27,32,35,39,43,46,50,55,58,61,66,70,73,78,81,84,87,90,93,96,100,104,108,112,116,119,122,125,129,132,135,138,141,144,148,151,154,157,160,163,167],{"category":28,"check":29,"severity":30,"summary":31},"Practical Utility","Problem relevance","pass","The problem statement clearly articulates the challenge of staying updated with arXiv research volume and frequency, and positions the extension as a solution.",{"category":28,"check":33,"severity":30,"summary":34},"Unique selling proposition","The extension offers a programmable interface for LLMs to interact with arXiv, providing capabilities beyond a simple API wrapper by enabling filtering, summarization, and structured metadata retrieval.",{"category":28,"check":36,"severity":37,"summary":38},"Production readiness","warning","While the server provides tools for fetching and searching arXiv, the README indicates that session configuration is 'in development currently!', suggesting key aspects of personalization and production readiness might be incomplete.",{"category":40,"check":41,"severity":30,"summary":42},"Scope","Single responsibility principle","The extension focuses on querying and discovering arXiv papers, with a secondary 'hello' tool that appears to be a leftover from a template but does not detract from the primary arXiv-focused scope.",{"category":40,"check":44,"severity":30,"summary":45},"Description quality","The description accurately reflects the extension's purpose: querying and discovering arXiv papers, with example usage demonstrating its core functionality.",{"category":47,"check":48,"severity":30,"summary":49},"Invocation","Scoped tools","The tools provided (`hello`, `fetch_current_arxiv_postings_rss`, `keyword_search_arxiv_rss`) are specific verb-noun actions, making them easy for an agent to select.",{"category":51,"check":52,"severity":53,"summary":54},"Documentation","Configuration & parameter reference","info","The `ConfigSchema` defines `pirate_mode` and `num_papers`, but the README mentions session configuration is 'in development currently!', and the tool descriptions do not explicitly reference how these configurations are used.",{"category":40,"check":56,"severity":30,"summary":57},"Tool naming","Tool names like `fetch_current_arxiv_postings_rss` and `keyword_search_arxiv_rss` are descriptive and follow kebab-case conventions.",{"category":40,"check":59,"severity":30,"summary":60},"Minimal I/O surface","Tool inputs are typed parameters, and outputs are structured lists or strings, with no evidence of excessive data being requested or returned.",{"category":62,"check":63,"severity":64,"summary":65},"License","License usability","critical","The 'License' field is 'n/a' and no LICENSE file or SPDX identifier is present in the repository, making the usage and redistribution of this code legally unclear.",{"category":67,"check":68,"severity":37,"summary":69},"Maintenance","Commit recency","The last commit was 214 days ago, indicating potential lack of maintenance.",{"category":67,"check":71,"severity":30,"summary":72},"Dependency Management","Dependencies are managed via `pyproject.toml` with pinned versions (`mcp>=1.15.0`, `smithery>=0.4.2`, `feedparser`), and `uv` is used for synchronization, suggesting good dependency management practices.",{"category":74,"check":75,"severity":76,"summary":77},"Security","Secret Management","not_applicable","The code does not appear to handle or expose any secrets directly. The `access_token` is mentioned as a placeholder in a commented-out section.",{"category":74,"check":79,"severity":30,"summary":80},"Injection","The extension does not load untrusted data or execute external code. Tools process specific inputs and fetch data from a known RSS feed.",{"category":74,"check":82,"severity":30,"summary":83},"Transitive Supply-Chain Grenades","The extension only uses the `feedparser` library and fetches data from a fixed arXiv RSS URL. There are no runtime downloads or suspicious external script executions.",{"category":74,"check":85,"severity":30,"summary":86},"Sandbox Isolation","The extension operates within its defined tools and resources, fetching data from a single URL and processing it. No operations outside the project folder are apparent.",{"category":74,"check":88,"severity":30,"summary":89},"Sandbox escape primitives","No detached-process spawns, retry loops around denied calls, or other sandbox-escape primitives were found in the code.",{"category":74,"check":91,"severity":30,"summary":92},"Data Exfiltration","The extension fetches data from a public arXiv RSS feed and does not appear to exfiltrate any user data or credentials.",{"category":74,"check":94,"severity":30,"summary":95},"Hidden Text Tricks","The bundled files do not contain any hidden text tricks, HTML comments, or unusual Unicode characters intended to steer the model.",{"category":97,"check":98,"severity":30,"summary":99},"Hooks","Opaque code execution","The code is written in plain Python and is not obfuscated, base64-encoded, or dynamically fetched.",{"category":101,"check":102,"severity":30,"summary":103},"Portability","Structural Assumption","The extension does not make assumptions about the user's project structure; it operates on external data via a URL and its own internal code.",{"category":105,"check":106,"severity":30,"summary":107},"Trust","Issues Attention","0 issues opened and 0 issues closed in the last 90 days, indicating no current maintenance activity or user issues.",{"category":109,"check":110,"severity":37,"summary":111},"Versioning","Release Management","The `Manifest Version` is 'n/a', and while `pyproject.toml` and `__init__.py` contain a version (`1.15.1`), there are no GitHub releases or CHANGELOG, and installation instructions reference `uv run dev` rather than a specific version.",{"category":113,"check":114,"severity":30,"summary":115},"Code Execution","Validation","Input parameters to tools are typed using Pydantic models (`str`, `bool`, `int`), ensuring basic validation.",{"category":74,"check":117,"severity":30,"summary":118},"Unguarded Destructive Operations","The extension is read-only and does not perform any destructive operations.",{"category":113,"check":120,"severity":30,"summary":121},"Error Handling","The Python code uses standard error handling, and the `feedparser` library is used, which typically handles parsing errors gracefully. No explicit complex error handling for agent interaction is evident, but no obvious fail-closed issues were found.",{"category":113,"check":123,"severity":76,"summary":124},"Logging","The skill is read-only and does not perform actions that would necessitate a local audit log for review.",{"category":126,"check":127,"severity":30,"summary":128},"Compliance","GDPR","The extension only accesses public arXiv data and does not handle any personal data.",{"category":126,"check":130,"severity":30,"summary":131},"Target market","The extension queries a public academic repository (arXiv) and does not exhibit any regional-specific logic. The target market is global.",{"category":101,"check":133,"severity":30,"summary":134},"Runtime stability","The extension uses standard Python libraries and the MCP SDK, making it portable across POSIX-compatible environments. It specifies Python 3.10+ as a requirement.",{"category":47,"check":136,"severity":30,"summary":137},"Precise Purpose","The description clearly states the extension's purpose: querying and discovering arXiv papers, and provides specific use cases like retrieving postings by category and searching by keyword. The README also specifies prerequisites and deployment methods.",{"category":47,"check":139,"severity":30,"summary":140},"Concise Frontmatter","The frontmatter in `SKILL.md` (implicitly represented by `smithery.yaml` and README) is concise and directly states the purpose and capabilities of the arXiv MCP server.",{"category":51,"check":142,"severity":30,"summary":143},"Concise Body","The main code file (`server.py`) is reasonably short and well-commented. The `AGENTS.md` and README files provide necessary documentation without excessive bloat.",{"category":145,"check":146,"severity":30,"summary":147},"Context","Progressive Disclosure","Documentation is provided in README.md and AGENTS.md, which are separate from the main server code, allowing for progressive disclosure.",{"category":145,"check":149,"severity":76,"summary":150},"Forked exploration","The skill is focused on fetching and searching data, not deep exploration of code or files, so `context: fork` is not applicable.",{"category":28,"check":152,"severity":30,"summary":153},"Usage examples","The README provides clear, end-to-end example usages demonstrating how an LLM would interact with the tools to find papers by category and keyword, including expected LLM actions.",{"category":28,"check":155,"severity":53,"summary":156},"Edge cases","While the happy path is handled, the documentation does not explicitly detail failure modes (e.g., RSS feed unavailable, no results found for a category/keyword) or recovery steps.",{"category":113,"check":158,"severity":76,"summary":159},"Tool Fallback","The extension does not appear to rely on external MCP servers; it functions as a self-contained MCP server using the Python SDK.",{"category":101,"check":161,"severity":30,"summary":162},"Stack assumptions","The `pyproject.toml` specifies Python 3.10+ and lists dependencies, and `smithery.yaml` indicates a Python runtime. The `AGENTS.md` also mentions Python 3.10+.",{"category":164,"check":165,"severity":30,"summary":166},"Safety","Halt on unexpected state","The extension is read-only and does not perform actions that would require checking for unexpected pre-state or a halt procedure.",{"category":101,"check":168,"severity":30,"summary":169},"Cross-skill coupling","The extension is self-contained and does not appear to rely on or interact with other specific skills.",1778005018040,"This Python-based MCP server allows AI applications to programmatically access arXiv data, including fetching new submissions by category and searching for papers using keywords. It returns structured metadata such as title, authors, summary, URL, and publication date.","2.0.0","3.4.0","The extension provides a clear value proposition for accessing arXiv data programmatically. However, the critical license finding and the warning for commit recency significantly impact trust. Additionally, the README notes that session configuration is still under development, suggesting it may not be fully production-ready.",65,"This extension provides an MCP server for querying and discovering arXiv papers, with tools to fetch and search submissions by category and keyword.",[15,16,17,18,19,20],"global","flagged",{"codeQuality":181,"collectedAt":182,"documentation":183,"maintenance":185,"security":187,"testCoverage":189},{},1778004993116,{"descriptionLength":184,"readmeSize":8},34,{"closedIssues90d":8,"openIssues90d":8,"pushedAt":186},1759464498000,{"hasNpmPackage":188,"smitheryVerified":188},false,{"hasCi":188,"hasTests":188},{"invalidatedAt":191,"updatedAt":191},1778007780389,{"githubOwner":193,"githubRepo":194,"locale":24,"slug":195,"type":196},"shoumikdc","arXiv-mcp","arxiv-mcp","skill",true,null,{"extract":200,"smithery":202},{"commitSha":201,"license":64},"f15fcc3844557ec39adf54c240d45bf31089b6b8",{"qualityScore":8,"totalActivations":8,"uniqueUsers":8,"useCount":8,"verified":188},{"repoId":204},"kd7c6x0414kpcgvtabd03re5t9865kjr",{"_creationTime":206,"_id":204,"identity":207,"providers":208,"workflow":216},1777995551258.1,{"githubOwner":193,"githubRepo":194,"sourceUrl":13},{"discover":209,"github":212},{"sources":210},[211],"mcp-registry",{"closedIssues90d":8,"forks":8,"homepage":213,"openIssues90d":8,"pushedAt":186,"readmeSize":214,"stars":8,"topics":215},"https://smithery.ai/server/@shoumikdc/arxiv-mcp",2103,[],{"discoverAt":217,"extractAt":218,"githubAt":218,"updatedAt":218},1777995551258,1778000480302,{"anyEnrichmentAt":191,"extractAt":220,"githubAt":221,"invalidatedAt":191,"llmAt":222,"smitheryAt":191,"updatedAt":191},1777999890864,1777999891196,1778005088200,[]]