arxiv-database

Pass

Audited by Gen Agent Trust Hub on Oct 29, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches scientific preprint metadata and PDF documents from export.arxiv.org and arxiv.org. These are well-known, reputable services for the research community. The script uses the official Atom API endpoint to retrieve search results.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external content retrieved from the arXiv API, such as paper titles and abstracts.
  • Ingestion points: Data enters the agent's context through the ArxivSearcher.search method in scripts/arxiv_search.py, which fetches XML data from arXiv.
  • Boundary markers: The skill parses the XML responses into a structured JSON format, which helps maintain a distinction between data fields and agent instructions.
  • Capability inventory: The skill includes network retrieval capabilities via the requests library and local file system write capabilities through the download_pdf method.
  • Sanitization: The script performs structural parsing of the XML but does not explicitly sanitize the text content of titles or abstracts before returning them in the JSON results.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 29, 2026, 07:48 PM