The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from the ArXiv API and PDF documents. It includes explicit defensive instructions to mitigate this risk.
Ingestion points: XML abstracts from export.arxiv.org and PDF content fetched via web_fetch.
Boundary markers: The skill contains robust guardrails in SKILL.md and SAFETY.md specifically directing the agent to treat paper content as data to describe, not directives to follow.
Capability inventory: Execution of the scripts/search_arxiv.sh script and appending data to memory/RESEARCH_LOG.md.
Sanitization: The agent is instructed to summarize research content while ignoring any embedded instructions regardless of claimed authority.
[COMMAND_EXECUTION]: Utilizes a local shell script scripts/search_arxiv.sh to interact with the ArXiv API. The script performs a standard GET request using curl to a well-known research repository.
[DATA_EXFILTRATION]: Implements a logging feature that writes research paper metadata (title, authors, summary) to a local file at memory/RESEARCH_LOG.md. This is a standard persistence mechanism for the agent's research memory.
[PROMPT_INJECTION]: While the SAFETY.md file contains examples of prompt injection strings (e.g., "Ignore all previous instructions"), these are clearly documented as test cases and safety evaluations by the author to demonstrate the skill's resilience, rather than active malicious injections.

arxiv-watcher-hardened