The Agent Skills Directory

[COMMAND_EXECUTION]: The SKILL.md file provides command templates for searching local files using grep. It instructs the agent to interpolate user-provided search terms directly into these commands (e.g., grep -r -i "查询关键词" ...). This pattern introduces a command injection vulnerability where a user could provide a keyword containing shell metacharacters (e.g., ;, &, |) to execute unauthorized commands on the host system. The command template provided is also malformed (missing a closing quote for the directory path), which may lead to unpredictable shell behavior.
[EXTERNAL_DOWNLOADS]: The included script scripts/paper_hunter.py contains functionality to download PDF files and metadata from external sources, specifically arXiv (arxiv.org) and PubMed (pubmed.ncbi.nlm.nih.gov). While these are well-known and reputable research services, the SKILL.md file explicitly states that the skill should "not be used for downloading new papers." The presence of this automated downloading logic contradicts the primary instructions provided to the agent.
[METADATA_POISONING]: There is a discrepancy between the skill's description and its included components. The description claims the tool is for local note searching only, but the inclusion of the paper_hunter.py script suggests a capability for automated paper acquisition that is not documented in the user-facing instructions. This misalignment can lead to an agent performing actions (like network downloads) that the user or system administrator expects to be disabled based on the skill's metadata.

paper-search