paper-navigator
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external academic sources, creating a potential surface for indirect prompt injection attacks.\n
- Ingestion points:
fetch_paper.pyfetches full paper text from external academic URLs (e.g., arxiv.org, doi.org) and the Jina Reader service; multiple scripts fetch paper titles, abstracts, and TLDRs from Semantic Scholar and DeepXiv/arXiv APIs.\n - Boundary markers: The instructions do not define explicit delimiters or boundary markers to isolate external paper content from agent instructions.\n
- Capability inventory: The skill is granted
write_fileto save papers/notes andexecuteto run the provided Python scripts.\n - Sanitization:
fetch_paper.pyimplements_strip_boilerplateto remove website navigation and cookie consent text from fetched content before it is processed by the agent.\n- [EXTERNAL_DOWNLOADS]: The skill facilitates downloading content and metadata from external academic platforms and utility services.\n download_paper.pydownloads PDF files fromarxiv.organd Semantic Scholar's open-access URLs.\nfetch_paper.pyretrieves paper content using ther.jina.aiservice.\n- Metadata and search results are retrieved from well-known academic APIs including Semantic Scholar, arXiv (via DeepXiv), HuggingFace, and GitHub.
Audit Metadata