arxiv-paper-writer
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/compile_paper.pyscript executes system commands to compile LaTeX documents using tools likepdflatex,bibtex, orlatexmk. Additionally,scripts/bootstrap_ieee_review_paper.pyuses subprocess calls to run other internal scripts within the skill's directory to manage paper plans and issues. - [EXTERNAL_DOWNLOADS]: The
scripts/arxiv_registry.pyscript makes HTTP requests to the arXiv API (export.arxiv.org) andarxiv.orgto fetch paper metadata and BibTeX citations. These are established academic platforms, and the script handles the data retrieval using standard libraries without suspicious overhead. - [PROMPT_INJECTION]: The skill ingests untrusted data from the arXiv API (titles, abstracts, and author names) to generate review content and citations. Evidence chain: (1) Ingestion point: Atom XML metadata fetched in
scripts/arxiv_registry.py. (2) Boundary markers: The skill includes instructions to verify every citation and follow a gated workflow with human approval. (3) Capability inventory: Subprocess calls for document compilation and project management. (4) Sanitization: Theescape_bibtex_textfunction inscripts/arxiv_registry.pysanitizes special characters for BibTeX entries.
Audit Metadata