The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from external URLs and PDFs, creating a surface for indirect prompt injection where malicious instructions embedded in a document could influence the agent's analysis. Ingestion points: External URLs and PDF files processed by resolve_source.py. Boundary markers: Instructions to differentiate between author claims, evidence, and agent inference. Capability inventory: Network requests and file system writes to the Obsidian vault. Sanitization: Basic sanitization of titles and filenames to prevent simple path traversal.
[EXTERNAL_DOWNLOADS]: The resolve_source.py script fetches data from external, non-whitelisted domains using the requests library.
[COMMAND_EXECUTION]: The skill executes local Python scripts to perform file system operations, such as creating directories and writing notes in the user's Obsidian vault.

paper-analyze