find-and-read-papers
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]:
- The skill utilizes
curlto interact with external academic APIs for searching and retrieving paper metadata. - The skill uses
uvxto execute thearxiv2markdowncommand-line tool, which converts ArXiv content into markdown format. - [EXTERNAL_DOWNLOADS]:
- The skill fetches data from several external domains including
api.alphaxiv.org,api.openalex.org,arxiv.org, andar5iv.org. - It dynamically installs and runs the
arxiv2markdownpackage from a public registry via theuvxtool. - [PROMPT_INJECTION]:
- The skill is susceptible to Indirect Prompt Injection because it ingests untrusted external content into the agent's context.
- Ingestion points: Full-text content from ArXiv papers, alphaXiv overviews, and abstracts from OpenAlex are loaded into the agent's active session (e.g., via
paper.md). - Boundary markers: The instructions do not implement any boundary markers or special delimiters to warn the agent that the fetched content should be treated as untrusted data.
- Capability inventory: The skill environment allows for network requests (
curl), running external software (uvx), and writing to the local file system. - Sanitization: No sanitization or filtering logic is present to identify or neutralize potential instructions hidden within the research papers.
Audit Metadata