The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The preflight script processes LaTeX files provided by the user, which constitutes an ingestion point for untrusted data. If these files contain malicious instructions, they could potentially influence the agent when it reviews the script's output. * Ingestion points: Content is read from user-provided directories in scripts/arxiv_preflight.py using Path.read_text(). * Boundary markers: The script does not wrap extracted text snippets in protective delimiters. * Capability inventory: The skill has no network or shell execution capabilities that could be exploited via injection. * Sanitization: The script uses specific regex patterns to extract information rather than executing the file content.
[EXTERNAL_DOWNLOADS]: The documentation references arxiv-latex-cleaner, a tool provided by a well-known technology organization, to help users sanitize their LaTeX source code.

arxiv-submission