pp-arxiv
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the
arxiv-pp-clitool usingnpxorgo installfrom the vendor's infrastructure atgithub.com/mvanhorn/printing-press-libraryand the@mvanhornNPM registry. - [COMMAND_EXECUTION]: The skill operates by executing the
arxiv-pp-clibinary with various flags, including a natural-language mapping tool (which) and a diagnostic tool (doctor). - [INDIRECT_PROMPT_INJECTION]: The skill processes research paper metadata from the public arXiv Atom API, which could contain untrusted data.
- Ingestion points: The
querycommand fetches external data (titles, abstracts, metadata) from the arXiv API into the agent context viaSKILL.md. - Boundary markers: Output is delimited within a structured JSON envelope using a
resultsfield. - Capability inventory: The tool includes shell command execution, atomic file writes via
file:<path>, and network POST requests viawebhook:<url>delivery sinks. - Sanitization: No explicit sanitization or filtering of the API-returned content is documented.
Audit Metadata