arxiv-reading

Pass

Audited by Gen Agent Trust Hub on Jul 5, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses the uvx tool to download and execute the arxiv2markdown package from the official Python package registry. It also fetches research paper content from ar5iv.org, which is a well-known community service for rendering LaTeX papers as HTML.
  • [COMMAND_EXECUTION]: Instructs the agent to execute the arxiv2md command locally to transform paper identifiers into Markdown files for easier processing and analysis.
  • [PROMPT_INJECTION]: As the skill is designed to ingest and process third-party research papers from arXiv, it possesses an attack surface for indirect prompt injection. Research papers are untrusted third-party content which could theoretically contain instructions designed to manipulate the LLM's summary or analysis; however, this is a general risk inherent to any tool that reads external web content and not a specific flaw in the skill's logic.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 5, 2026, 09:26 AM
Security Audit — agent-trust-hub — arxiv-reading