The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/arxiv_monitor.py invokes a sibling tool, arxiv_search.py, via subprocess.run. The command is constructed using a list of arguments rather than a raw string, which effectively prevents shell injection vulnerabilities. The use of sys.executable ensures the script runs within the same Python environment.
[INDIRECT_PROMPT_INJECTION]: The skill processes research paper data fetched from the external arXiv API through a search script, creating a potential surface for indirect injection.
Ingestion points: Data enters the skill via the standard output of the search subprocess, which is then parsed in scripts/arxiv_monitor.py.
Boundary markers: The skill uses structured JSON parsing for all data exchange, ensuring data is not treated as executable instructions.
Capability inventory: The skill can perform file writes to watchlist.json and execute the local sibling script via subprocess.run.
Sanitization: The skill uses standard JSON loading and strictly compares paper IDs against a 'seen' list; it does not perform any unsafe string evaluations or dynamic code generation from the external data.

arxiv-monitor