paper-analysis-assistant
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches PDF files from the official arXiv domain (arxiv.org) for analysis.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from external PDF files and uses it to generate multiple output formats.
- Ingestion points: Content is retrieved from remote arXiv URLs via scripts/download_pdf.py and extracted from PDFs using scripts/extract_text.py.
- Boundary markers: No explicit delimiters or instructions are used to distinguish the paper content from operating instructions.
- Capability inventory: Includes file system write operations across all scripts (CSV, HTML, PPTX, WAV) and network downloads from arXiv.
- Sanitization: The scripts/generate_html.py script directly embeds extracted text into HTML reports without sanitization or escaping.
Audit Metadata