The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill connects to reputable academic and research services to fetch data, including arxiv.org for paper metadata and LaTeX sources, semanticscholar.org for citation graph data, and jina.ai for clean text extraction from PDFs. These are well-known services relevant to the skill's primary purpose.
[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted content from external academic papers and LaTeX sources. This data is interpolated into analysis prompts in scripts/understand.py. The risk is mitigated by the use of clear boundary markers and delimiters (e.g., --- PAPER CONTENT: ---) which help the agent distinguish between paper text and its own instructions.
Ingestion points: Paper abstracts and search results (connect.py), full-text content via Jina Reader (connect.py), and LaTeX source code (tikz.py).
Boundary markers: Explicitly present in scripts/understand.py and scripts/tikz.py using markdown headers and horizontal rules to isolate external content.
Capability inventory: SQLite database writes for caching (cache.py), network GET requests (connect.py, evidence.py, tikz.py), and temporary file creation/extraction (tikz.py).
Sanitization: scripts/utils.py provides cleanText for whitespace normalization, and scripts/tikz.py utilizes the filter="data" parameter in tarfile.extractall() to prevent path traversal attacks during archive decompression.

arxiv-research