arxiv-reading
Pass
Audited by Gen Agent Trust Hub on Jul 5, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses the
uvxtool to download and execute thearxiv2markdownpackage from the official Python package registry. It also fetches research paper content fromar5iv.org, which is a well-known community service for rendering LaTeX papers as HTML. - [COMMAND_EXECUTION]: Instructs the agent to execute the
arxiv2mdcommand locally to transform paper identifiers into Markdown files for easier processing and analysis. - [PROMPT_INJECTION]: As the skill is designed to ingest and process third-party research papers from arXiv, it possesses an attack surface for indirect prompt injection. Research papers are untrusted third-party content which could theoretically contain instructions designed to manipulate the LLM's summary or analysis; however, this is a general risk inherent to any tool that reads external web content and not a specific flaw in the skill's logic.
Audit Metadata