arxiv-search
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the ArXiv repository through the arxiv_get_paper tool. Ingestion points: The arxiv_get_paper tool retrieves paper content and metadata from an external academic repository. Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded commands within the retrieved paper content. Capability inventory: The skill only defines specific search and retrieval tools and lacks capabilities for file system modification, command execution, or arbitrary network requests. Sanitization: No explicit sanitization or filtering of the retrieved content is mentioned.
- [SAFE]: No malicious patterns, code, or dangerous command executions were found. The skill is restricted to academic research tasks and provides specific citation formatting guidelines.
Audit Metadata