arxiv-monitor
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill retrieves and processes external content (paper titles and abstracts) from the arXiv and Semantic Scholar APIs, which constitutes an indirect prompt injection surface. This means adversarial text hidden in a research abstract could theoretically attempt to influence the agent's behavior.
- Ingestion points: Paper metadata and abstracts fetched from well-known academic repositories (arXiv and Semantic Scholar).
- Boundary markers: The instructions do not define specific delimiters (such as XML tags or unique markers) to isolate external abstract text from the skill's processing instructions during the scoring phase.
- Capability inventory: The agent can write report files to the local filesystem (e.g.,
~/arxiv-digest-{date}.txt) and format content for external destinations like Slack or Obsidian. - Sanitization: There is no explicit requirement for the agent to sanitize or escape the content of the abstracts before they are analyzed for relevance or included in the final report.
Audit Metadata