arxiv-search
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill communicates with the public arXiv API at
export.arxiv.orgto retrieve paper information. This is a standard interaction with a well-known and trusted academic service. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content (titles and abstracts) retrieved from the arXiv database.
- Ingestion points: External text data enters the agent's context through the JSON output generated by
scripts/arxiv_search.py. - Boundary markers: The instructions in
SKILL.mdrequire the agent to summarize abstracts and format paper data into a structured table, which naturally limits the potential for embedded instructions to influence agent behavior. - Capability inventory: The skill is restricted to network-based metadata retrieval and does not have access to sensitive files or command execution capabilities.
- Sanitization: The script uses standard XML parsing and performs basic string cleaning to handle the API response.
Audit Metadata