arxiv-analyze
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill fetches and analyzes academic papers from external sources (arXiv). This introduces a surface for indirect prompt injection where instructions embedded in a paper could attempt to influence the agent's behavior during summary generation.\n
- Ingestion points: The
scripts/arxiv_fetch.pyscript fetches content fromarxiv.org,arxiv2md.org, andar5iv.labs.arxiv.org.\n - Boundary markers: The fetched content is not wrapped in explicit boundary markers or delimiters before analysis.\n
- Capability inventory: The skill can perform network operations and write files to the local user cache directory (
~/.cache/ai-skill-arxiv/).\n - Sanitization: Text content is fetched and decoded using standard methods without specific filtering for adversarial instructions.\n- [EXTERNAL_DOWNLOADS]: The skill fetches academic paper content and metadata from
arxiv.org,arxiv2md.org, andar5iv.labs.arxiv.org. These are established sources for scholarly articles and related conversion utilities.\n- [COMMAND_EXECUTION]: The skill uses a helper scriptscripts/arxiv_fetch.pyto manage fetching and caching. The script handles user-provided IDs safely using regular expression validation and standard argument parsing viaargparse.
Audit Metadata