arxiv-analyze

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The agent reads user-specified arXiv papers and metadata from external repositories (arxiv.org, arxiv2md.org, ar5iv), which constitutes searching and fetching specific outsider-authored research content.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill fetches content from arxiv2md.org (https://arxiv2md.org/api/markdown?), which is an unverified third-party service providing operational markdown parsing for arXiv papers, constituting a medium-tier unofficial dependency.