arxiv-preflight
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted TeX and PDF files from a submission directory to generate its validation report, which presents a surface for indirect prompt injection.
- Ingestion points: The skill reads all project files, including .tex source code, .bbl bibliography files, and compiled PDFs (SKILL.md, Workflow Step 1).
- Boundary markers: There are no explicit delimiters or specific instructions for the agent to ignore potentially malicious commands embedded within the user-provided TeX source or PDF metadata.
- Capability inventory: The skill uses file-reading tools and is capable of writing the audit results to a report file named arxiv-preflight-report.md (SKILL.md, Workflow Step 3/4).
- Sanitization: The instructions do not define any sanitization or filtering protocols for the input data before it is processed by the agent.
Audit Metadata