arxiv
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches metadata and academic records from arXiv (export.arxiv.org) and Semantic Scholar (api.semanticscholar.org). These are well-known academic services, and the data retrieval is a core function of the research tool.
- [COMMAND_EXECUTION]: The skill provide curl commands to interact with scientific REST APIs, which is standard behavior for a research utility.
- [REMOTE_CODE_EXECUTION]: Automated scanners flagged the pattern of piping curl output to python. Analysis confirms these are instructions to parse data with a provided script (python -c or python -m json.tool), not execution of untrusted remote code. ArXiv and Semantic Scholar are reputable academic resources.
- [INDIRECT_PROMPT_INJECTION]: 1. Ingestion points: XML data from arXiv and JSON data from Semantic Scholar processed in SKILL.md and scripts/search_arxiv.py. Paper content is also extracted via web_extract. 2. Boundary markers: None identified in the parsing scripts or prompt templates. 3. Capability inventory: Access to curl, shell execution for parsing, and paper content extraction tools. 4. Sanitization: Relies on standard parsing libraries without specific filtering for prompt injection patterns in academic text.
Audit Metadata