The Agent Skills Directory

External Dependency Management: The skill requires the 'arxiv' package, a reputable and well-known library for accessing the arXiv repository. The installation process uses a virtual environment, which is a security best practice for managing external code and maintaining environment isolation.
Indirect Prompt Injection Surface: The skill retrieves information from an external source (arXiv), which represents a potential ingestion point for untrusted content. While academic papers are generally safe, any tool processing external text creates a theoretical surface where adversarial content could attempt to influence an agent's behavior. Evidence Chain: (1) Ingestion points: The script arxiv_search.py retrieves titles and summaries from the arXiv API; (2) Boundary markers: None present in the formatted output; (3) Capability inventory: The skill performs API queries and text formatting without dangerous system-level access or command execution; (4) Sanitization: None applied to the paper metadata. This is an expected characteristic of search tools and should be managed by the agent's internal safety guardrails.

arxiv-search