The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill ingests external research data which could potentially contain adversarial content intended to influence agent behavior.
Ingestion points: Paper metadata and summaries are fetched via scripts/search_arxiv.sh from the ArXiv API, and additional details are retrieved from PDFs using web_fetch.
Boundary markers: The workflow instructions do not define clear delimiters or include warnings for the agent to ignore instructions embedded within the paper data.
Capability inventory: The skill has the ability to execute shell scripts and perform file write operations to memory/RESEARCH_LOG.md.
Sanitization: There is no evidence of filtering or sanitization applied to the external paper content before it is processed or stored in the research log.
[EXTERNAL_DOWNLOADS]: The skill fetches research data from the official ArXiv API (export.arxiv.org). This is a legitimate and expected operation for the skill's stated purpose of tracking academic papers.
[COMMAND_EXECUTION]: The shell script scripts/search_arxiv.sh executes a curl command where the search query is interpolated directly into the URL. This represents a potential surface for parameter injection if the query string is not properly handled by the calling agent.

arxiv-watcher