The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data (Arxiv research papers) to generate executable Python code. A malicious paper could contain adversarial text designed to influence the agent into generating harmful code or backdoors within the implementation.
Ingestion points: The skill accepts Arxiv URLs or IDs (e.g., https://arxiv.org/abs/1706.03762) as primary input.
Boundary markers: There are no explicit delimiters or instructions described to prevent the agent from following directives embedded within the paper text.
Capability inventory: The skill has the capability to write multiple files (src/model.py, requirements.txt, etc.) and provide instructions for the user to execute that code.
Sanitization: No specific validation or filtering mechanism for the paper's content is mentioned.
[DYNAMIC_EXECUTION]: The skill's primary function is the generation of Python scripts and configuration files based on external input. It provides examples of generating complex neural network architectures and encourages users to execute them directly (python -c "..."), which is a standard execution path for generated code that bypasses static safety checks.
[EXTERNAL_DOWNLOADS]: The skill installation instructions use npx skills add targeting a specific GitHub repository (PrathamLearnsToCode/paper2code). Additionally, the generated projects include a requirements.txt file which triggers the download of external packages (e.g., torch, jax, tensorflow) from public registries when the user follows the setup instructions.

paper2code-arxiv-implementation