arxiv-watcher
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/search_arxiv.shuses the$QUERYvariable without sufficient sanitization in thecurlcommand. Malicious queries containing shell metacharacters could lead to unintended shell behavior or argument splitting. - [PROMPT_INJECTION]: The skill is vulnerable to Indirect Prompt Injection because it ingests and processes untrusted data (XML summaries and PDF content) from ArXiv.
- Ingestion points: XML output from the ArXiv API and PDF content retrieved via the
web_fetchcapability. - Boundary markers: Absent; there are no instructions to use delimiters or ignore embedded instructions in the fetched data.
- Capability inventory: Execution of shell scripts and writing to persistent storage in
memory/RESEARCH_LOG.md. - Sanitization: Absent; the skill does not validate or escape retrieved paper content before presenting it to the user or logging it to memory.
Audit Metadata