The Agent Skills Directory

[PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection (Category 8) because it processes untrusted data from external sources.
Ingestion points: Downloads PDF files, LaTeX source code, and HTML metadata from arxiv.org and huggingface.co.
Boundary markers: The skill does not implement explicit boundary markers or 'ignore embedded instructions' warnings when passing extracted text or metadata to the LLM for analysis.
Capability inventory: The agent has access to Bash (for executing curl, tar, and python), Write (for creating/updating notes in the Obsidian vault), and WebFetch.
Sanitization: scripts/generate_note.py performs basic sanitization on paper titles and domain names to prevent simple path traversal, but does not sanitize the content of the paper for malicious instructions.
[COMMAND_EXECUTION]: The skill uses Bash to perform several operations:
Environment initialization (mkdir, cd).
Metadata extraction using grep, awk, and paste on HTML content.
Archive extraction using tar -xzf on downloaded paper source files.
Execution of local Python scripts included with the skill (scripts/generate_note.py, scripts/update_graph.py).
[EXTERNAL_DOWNLOADS]: The skill fetches data from remote servers:
Downloads PDF and source archives from arxiv.org using curl.
Fetches metadata from arxiv.org and huggingface.co using WebFetch.
These are well-known technology and academic services, and the downloads are consistent with the skill's stated purpose.

paper-analyze