huggingface-paper-publisher
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches research metadata from the official arXiv API at
export.arxiv.org. It also interacts with Hugging Face Hub APIs to manage repository content. Both sources are well-known, established services appropriate for the skill's documented functionality. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources and persists it into repository context, creating a surface for indirect prompt injection.
- Ingestion points: The
get_arxiv_infofunction inscripts/paper_manager.pyfetches paper titles, author lists, and abstracts from the arXiv API. The skill also accepts these values via command-line arguments (--title,--abstract,--citation). - Boundary markers: Content added to repository README files is enclosed within structural HTML comments:
<!-- paper-manager:start -->and<!-- paper-manager:end -->. - Capability inventory: The skill possesses
networkaccess via therequestslibrary andwriteaccess to Hugging Face repositories via thehuggingface_hublibrary. It also performs local filesystem writes when generating paper templates. - Sanitization: The skill implements a
_sanitize_textmethod that removes control characters, collapses whitespace, and neutralizes markdown code-fence breakouts and YAML document delimiters to prevent accidental or malicious formatting disruption.
Audit Metadata