The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides instructions for the agent to execute tar and zip commands. It mitigates potential command injection risks by requiring the validation of filenames to ensure no spaces or special characters are present before archival.
[INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it parses potentially untrusted LaTeX source files to resolve dependencies for packaging.
Ingestion points: Local file system, specifically .tex files, .bbl files, and directory listings in SKILL.md.
Boundary markers: Absent; the skill does not specify using delimiters or prompts to prevent the agent from following instructions embedded in the processed LaTeX files.
Capability inventory: Shell command execution via tar and zip, and file system traversal/management.
Sanitization: The skill performs sanitization by identifying and excluding sensitive files such as .env, credentials, and private notes, and by validating that filenames maintain a safe structure.

arxiv-package