The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill downloads research papers and source archives from arxiv.org and user-specified URLs to extract figures. arXiv is a well-known and trusted academic repository. The script limits downloads to 200MB and verifies the %PDF- magic bytes to ensure file integrity.
[INDIRECT_PROMPT_INJECTION]: The skill processes external content (PDF and LaTeX source files). It implements several security controls to mitigate risks associated with untrusted data:
Ingestion points: scripts/extract_images.py processes downloaded arXiv source archives (.tar.gz) and PDF files.
Boundary markers: While not explicitly using boundary markers in the instructions, the data is processed programmatically to extract binary images rather than text that could influence the prompt chain.
Capability inventory: The skill performs filesystem writes to the user's Obsidian vault and network downloads to fetch papers.
Sanitization: The script sanitizes filenames using regex and validates archive member paths to prevent path traversal attacks (ZipSlip/TarSlip mitigation).
[COMMAND_EXECUTION]: The skill executes a localized Python script (extract_images.py) to perform its tasks. The script receives arguments validated by the agent and performs internal normalization of arXiv IDs and URLs to prevent misuse.

extract-paper-images