alterlab-arxiv
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from an external API and has file-writing capabilities.\n
- Ingestion points: Research paper titles and abstracts are retrieved from the arXiv Atom API in
scripts/arxiv_search.py.\n - Boundary markers: The instructions do not include specific delimiters or warnings to ignore commands that might be embedded in the fetched paper metadata.\n
- Capability inventory: The skill uses
requestsfor network access andopen().write()for saving PDF files inscripts/arxiv_search.py.\n - Sanitization: The skill performs basic whitespace normalization but does not sanitize the text for potentially malicious instructions.\n- [EXTERNAL_DOWNLOADS]: The skill downloads research papers in PDF format from arXiv.org, a well-known service for academic preprints, as part of its core functionality.
Audit Metadata