arxiv-watcher
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a bash script (
scripts/search_arxiv.sh) to query the ArXiv API using curl. - [EXTERNAL_DOWNLOADS]: Fetches data from the official ArXiv repository (
export.arxiv.org). This is a well-known academic service and its use is consistent with the skill's purpose. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection from untrusted external data.
- Ingestion points: Research paper metadata (titles and abstracts) is ingested via the ArXiv API and added to the agent's context.
- Boundary markers: There are no boundary markers or clear instructions for the agent to ignore potentially malicious commands embedded within the paper text.
- Capability inventory: The skill has the ability to execute shell scripts and write summaries to a persistent log file (
memory/RESEARCH_LOG.md). - Sanitization: Paper summaries are processed and written to local memory without validation or sanitization.
Audit Metadata