The Agent Skills Directory

[PROMPT_INJECTION]: The skill processes untrusted external LaTeX source code and abstracts from ArXiv, which introduces a surface for indirect prompt injection. A maliciously crafted paper could include instructions intended to manipulate the agent's output or trigger specific analysis paths (such as the appendix reading logic).
Ingestion points: External data enters the system via arxiv_fetcher/fetcher.py (ArXiv API/RSS).
Boundary markers: The paper content is interpolated into LLM prompts in agents/reader_agent.py and agents/summary_agent.py without explicit delimiters or 'ignore embedded instructions' warnings.
Capability inventory: The skill possesses no high-risk capabilities like unrestricted filesystem writing, arbitrary shell execution, or network exfiltration tools; its primary functions are text analysis and logging.
Sanitization: While paper_reader/latex_parser.py performs basic LaTeX cleanup for readability, it does not sanitize the content for potential adversarial instructions.
[EXTERNAL_DOWNLOADS]: The skill fetches paper metadata and LaTeX source files from rss.arxiv.org and arxiv.org. These are official academic repositories and are considered trusted sources for the skill's primary purpose. It also utilizes the arxiv-to-prompt package to facilitate content extraction.
[COMMAND_EXECUTION]: The skill provides a command-line interface that processes user-supplied ArXiv IDs and URLs. This input is handled by the arxiv Python library to construct API requests, preventing direct shell command injection.

arxiv-reader