The Agent Skills Directory

[SAFE]: No malicious patterns, command injections, or safety bypasses were detected in the instructions or the accompanying Python scripts. The skill is transparent in its operation, focusing on academic harvesting from verified national endpoints.
[REMOTE_CODE_EXECUTION]: No remote code execution vulnerabilities were found. The scripts use standard network libraries (requests/urllib) to fetch content from hardcoded or user-supplied URLs within the expected DergiPark domain.
[DATA_EXFILTRATION]: The skill does not access sensitive local files such as SSH keys, environment variables, or cloud credentials. Network operations are limited to academic metadata retrieval and PDF downloads from the target platform.
[OBFUSCATION]: The code and documentation are in plain text. No Base64, hex encoding, zero-width characters, or homoglyph-based URL spoofing were detected.
[INDIRECT_PROMPT_INJECTION]: While the skill ingests external content (article abstracts and titles), it processes this data into structured formats like JSON and BibTeX using standard parsers. It does not interpolate untrusted data into instructions or use it to drive autonomous agent decisions, maintaining a safe execution boundary.

alterlab-dergipark