summarise-paper
Warn
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: MEDIUMPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill's setup instructions include the use of
sudo apt-get installto install thepoppler-utilsdependency, which requires administrative privileges. - [COMMAND_EXECUTION]: The workflow relies on executing shell commands such as
pdftoppmfor PDF processing andtar(implied) for unpacking archives from ArXiv. - [EXTERNAL_DOWNLOADS]: The skill fetches LaTeX source files from
arxiv.org. This is a well-known and trusted academic service, and the download is used for data processing rather than code execution. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from external academic papers which could theoretically be used to influence agent behavior through embedded instructions.
- Ingestion points: Local PDF files and remote LaTeX source code downloaded from ArXiv.
- Boundary markers: Absent; there are no specific delimiters or instructions provided to the agent to distinguish paper content from operational instructions.
- Capability inventory: The skill utilizes tools for image conversion, archive extraction, and file system writes.
- Sanitization: No sanitization or filtering of the paper text is performed before it is processed for summarization.
Audit Metadata