read-arxiv-paper
Pass
Audited by Gen Agent Trust Hub on Mar 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches TeX source archives from
arxiv.org. This is a well-known and reputable academic service, and the download is considered safe for its intended research purpose. - [COMMAND_EXECUTION]: The agent is instructed to unpack
.tar.gzfiles into a local cache directory (~/.cache/nanochat/knowledge/). This involves file system operations and the use of archival tools, which should be monitored for standard risks like path traversal. - [PROMPT_INJECTION]: The skill presents an Indirect Prompt Injection surface because it ingests untrusted LaTeX source content from an external source and subsequently reviews local repository code ('nanochat') to relate the two. Maliciously crafted content within a paper could attempt to manipulate the agent's logic or influence how it interprets local project files.
- Ingestion points:
SKILL.md(Part 2, 3, and 5) describes downloading and reading external LaTeX source files. - Boundary markers: The instructions do not define specific delimiters or security warnings to isolate external paper content from agent instructions.
- Capability inventory: The agent has the capability to read local project files, read downloaded LaTeX content, and write summary markdown files to the local directory.
- Sanitization: There is no instruction to sanitize or validate the content of the LaTeX files before processing.
Audit Metadata