alterlab-arxiv
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION]: The skill performs network requests to official arXiv domains (export.arxiv.org and arxiv.org) to fetch metadata and research papers. These operations are restricted to the primary purpose of the skill and do not involve the collection or transmission of sensitive local information.
- [PROMPT_INJECTION]: Potential surface for indirect prompt injection via external data ingestion:
- Ingestion points: Paper titles, abstracts, and author names are retrieved from the external arXiv Atom API in
scripts/arxiv_search.py. - Boundary markers: Not present; retrieved text is processed and returned in structured JSON without specific delimiters.
- Capability inventory: The skill facilitates network reads (API) and local file writes (PDF downloads).
- Sanitization: Standard XML parsing is used to extract textual data from the API response.
Audit Metadata