arxiv-database
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches scientific preprint metadata and PDF documents from
export.arxiv.organdarxiv.org. These are well-known, reputable services for the research community. The script uses the official Atom API endpoint to retrieve search results. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external content retrieved from the arXiv API, such as paper titles and abstracts.
- Ingestion points: Data enters the agent's context through the
ArxivSearcher.searchmethod inscripts/arxiv_search.py, which fetches XML data from arXiv. - Boundary markers: The skill parses the XML responses into a structured JSON format, which helps maintain a distinction between data fields and agent instructions.
- Capability inventory: The skill includes network retrieval capabilities via the
requestslibrary and local file system write capabilities through thedownload_pdfmethod. - Sanitization: The script performs structural parsing of the XML but does not explicitly sanitize the text content of titles or abstracts before returning them in the JSON results.
Audit Metadata