The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: Automated alerts regarding piped execution were evaluated and determined to be false positives. The skill uses curl to fetch data from academic APIs and pipes the resulting XML or JSON into local Python commands (specifically python3 -c for XML parsing and python3 -m json.tool for JSON formatting). The Python code executed is statically defined within the skill instructions and treats the remote response strictly as data, not as an executable script.
[INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection as it ingests untrusted metadata (titles, authors, and abstracts) from external academic APIs. 1. Ingestion points: Paper metadata is retrieved from export.arxiv.org and api.semanticscholar.org (SKILL.md). 2. Boundary markers: There are no explicit delimiters or instructions to the agent to ignore instructions embedded in the retrieved metadata. 3. Capability inventory: The skill uses curl subprocess calls and the web_extract tool (SKILL.md). 4. Sanitization: No specific filtering or sanitization of the retrieved text is present. However, given the primary purpose of academic research, the risk is negligible and typical for this use case.
[EXTERNAL_DOWNLOADS]: The skill references and fetches data from well-known and reputable academic services, including arxiv.org and semanticscholar.org. These references are documented neutrally as they are essential to the skill's function and originate from trusted scholarly sources.

arxiv