The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The script fetch_oa.py downloads PDF files from reputable academic sources including Unpaywall, PubMed Central, Europe PMC, OpenAlex, Crossref, and arXiv. These downloads are essential to the skill's function and use official APIs.
[COMMAND_EXECUTION]: The skill executes pdftotext and pdfinfo via subprocess.run to verify the identity and properties of downloaded PDFs. Filenames are sanitized via safe_doi_name to prevent command injection, and the commands are only executed if the binaries are found on the system path.
[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external DOI worklists and the content of downloaded PDFs. Ingestion points include read_doi_file in fetch_oa.py (DOI list) and extract_pdf_text (downloaded PDF content). While no boundary markers are present, the skill's capabilities (file-write, network-read, and subprocess execution) are focused on its primary retrieval task. It employs normalize_title and normalize_identifier to clean extracted data before processing.

fulltext-retrieval