arxiv-source-first-paper-ingest
Warn
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
curlto download LaTeX source packages and metadata from the official academic repositoryarxiv.org. - [COMMAND_EXECUTION]: The skill instructions direct the agent to execute shell commands for file management (
mkdir,tar,gunzip) and to run local development tools usingcargo runandbun run. - [COMMAND_EXECUTION]: The skill includes numerous pre-compiled binary artifacts (
.rlibfiles) and build metadata in thetools/*/target/directories. These files are opaque and provide an unverified attack surface; they should be built from source by the user rather than distributed as binaries. - [COMMAND_EXECUTION]: The TypeScript utility
tools/compile_each_formula_with_real_tex_engine.tsexecutespdflatexon mathematical formulas extracted from the downloaded LaTeX source. Compiling untrusted LaTeX source code is risky because the TeX engine can execute arbitrary system commands or access the file system if shell-escape features are enabled. - [DATA_EXFILTRATION]: The build metadata files included in the
target/directories leak absolute file paths from the author's local environment (e.g.,/Users/terryli/...), which reveals information about the host system's structure.
Audit Metadata