arxiv-search
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: Fetches scientific metadata and abstracts from the official arXiv API at export.arxiv.org. This is a well-known service and the operations align with the skill's intended purpose.
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection from untrusted external data. It retrieves paper titles and abstracts and processes them within the agent context.
- Ingestion points: scripts/arxiv_api.py (fetches data from the arXiv Query API)
- Boundary markers: Absent. The instructions do not provide delimiters or warnings for the agent to ignore instructions embedded in the fetched summaries.
- Capability inventory: scripts/arxiv_api.py uses urllib.request for network operations.
- Sanitization: Absent. Data is normalized for whitespace but lacks content sanitization to prevent potential instruction execution.
Audit Metadata