arxiv-analyze

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill fetches and analyzes academic papers from external sources (arXiv). This introduces a surface for indirect prompt injection where instructions embedded in a paper could attempt to influence the agent's behavior during summary generation.\n
  • Ingestion points: The scripts/arxiv_fetch.py script fetches content from arxiv.org, arxiv2md.org, and ar5iv.labs.arxiv.org.\n
  • Boundary markers: The fetched content is not wrapped in explicit boundary markers or delimiters before analysis.\n
  • Capability inventory: The skill can perform network operations and write files to the local user cache directory (~/.cache/ai-skill-arxiv/).\n
  • Sanitization: Text content is fetched and decoded using standard methods without specific filtering for adversarial instructions.\n- [EXTERNAL_DOWNLOADS]: The skill fetches academic paper content and metadata from arxiv.org, arxiv2md.org, and ar5iv.labs.arxiv.org. These are established sources for scholarly articles and related conversion utilities.\n- [COMMAND_EXECUTION]: The skill uses a helper script scripts/arxiv_fetch.py to manage fetching and caching. The script handles user-provided IDs safely using regular expression validation and standard argument parsing via argparse.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 06:14 AM