literature-search-arxiv
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches metadata and document files from the official arXiv repository and API (arxiv.org and export.arxiv.org). These are well-known, trusted academic services.
- [COMMAND_EXECUTION]: The skill uses Python scripts to perform searches and file downloads. These tools take user-provided arguments for file paths and output downloaded content to the local filesystem. The instructions include specific security guidance for safely extracting LaTeX source archives to prevent filesystem clutter or potential archive-based attacks.
- [INDIRECT_PROMPT_INJECTION]: The skill has an indirect prompt injection surface because it ingests untrusted text (titles, abstracts, and author names) published by third parties on arXiv.
- Ingestion points: Search results returned by
scripts/search_arxiv.py. - Boundary markers: None present in the utility script output to distinguish data from instructions.
- Capability inventory: The agent has the ability to write files to the disk and execute further commands based on the ingested content.
- Sanitization: The script returns raw strings from the XML response without sanitization or filtering.
Audit Metadata