arxiv
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill contains instructions and examples for downloading academic papers from arXiv's official domain (
arxiv.org). These operations are consistent with the skill's primary purpose and target a well-known, trusted academic repository. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes untrusted XML data from the arXiv API (titles, summaries, and metadata), which presents a potential surface for indirect prompt injection.
- Ingestion points: The skill fetches XML feeds from
export.arxiv.orgas shown in the Python examples inSKILL.md. - Boundary markers: No explicit boundary markers or instructions to ignore embedded content are present in the processing logic.
- Capability inventory: The skill utilizes network access (
curl,urlopen) and file-write capabilities (curl -o). - Sanitization: The provided examples perform basic string trimming (
strip()) but do not include specific sanitization or validation for LLM-based injection attacks.
Audit Metadata