The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes external data from arXiv (URLs, PDFs, or text), which introduces a vulnerability surface for indirect prompt injection where malicious instructions could be embedded in the research papers to influence the agent's behavior.
Ingestion points: The paper input field in SKILL.md and manifest.json accepts untrusted external content.
Boundary markers: There are no explicit delimiters or specific instructions provided to the agent to disregard potential commands found within the research papers.
Capability inventory: The skill is configured to use the WebFetch and Read tools.
Sanitization: No sanitization or validation mechanisms are described to filter or escape the content ingested from the external papers.

arxiv-space-paper-to-brief