The Agent Skills Directory

[DYNAMIC_EXECUTION]: The instructions in SKILL.md use shell pipes to pass XML and JSON data from the arXiv and Semantic Scholar APIs into Python one-liners (python -c "...") and the standard JSON formatting module (python -m json.tool). While these commands involve dynamic execution of Python code, the code itself is a static string provided within the command for parsing purposes and does not execute the remote content as code. This pattern is a routine method for processing API responses in development workflows.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from academic sources which could potentially contain malicious instructions intended to influence the agent's behavior.
Ingestion points: SKILL.md and scripts/search_arxiv.py ingest data from export.arxiv.org and api.semanticscholar.org, including paper titles, abstracts, and author names.
Boundary markers: Absent; the data is interpolated directly into the agent's context or processed by parsing scripts without delimiters or instructions to ignore embedded commands.
Capability inventory: The skill possesses network access (curl) and utilizes paper extraction tools (web_extract), which could be abused if the agent follows instructions hidden within paper metadata.
Sanitization: The parsing logic performs basic string cleaning (whitespace stripping, newline replacement) but does not implement security sanitization or filtering to detect or remove potential prompt injection payloads.

arxiv