The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill performs network requests to well-known academic services, including arXiv (export.arxiv.org) and Semantic Scholar (api.semanticscholar.org). These connections are used solely for retrieving paper metadata and abstracts in XML or JSON format, which are reputable sources for research purposes.
[COMMAND_EXECUTION]: Examples are provided for using curl to fetch API data and pipe it to python3 for parsing. A manual review of the provided commands confirms that the Python code is provided as a local script or inline string via the -c flag. This ensures that the logic executed is defined within the skill itself and merely processes the incoming data from the API.
[REMOTE_CODE_EXECUTION]: Automated alerts regarding remote code execution were evaluated. These findings are considered false positives because the network component is restricted to data retrieval from trusted academic sources, while the execution component uses local logic defined within the skill rather than executing arbitrary remote scripts.
[DATA_EXFILTRATION]: No sensitive local files, credentials, or environment variables are accessed. The skill's network operations are strictly limited to communication with legitimate research APIs for the purpose of data retrieval.
[PROMPT_INJECTION]: The skill ingests untrusted data from external research databases (paper titles and abstracts). Evidence:
Ingestion points: scripts/search_arxiv.py (via urllib.request) and curl snippets in SKILL.md.
Boundary markers: Absent in text output formatting.
Capability inventory: Low; the skill primarily prints results and references standard web extraction tools for reading PDFs.
Sanitization: Employs standard XML and JSON parsing libraries (xml.etree.ElementTree and json.tool) to handle data structures, which mitigates simple injection risks. The risk of indirect prompt injection is minimal given the source material and limited tool capabilities.

arxiv