arxiv
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill retrieves research paper metadata and abstracts from the official arXiv API at
export.arxiv.org. This represents standard functionality for an academic research tool using an established service and does not involve the execution of remote code. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted text from external paper summaries, creating a potential surface for indirect prompt injection where malicious instructions could be embedded in paper data. * Ingestion points: The script
scripts/search_arxiv.pyfetches and parses XML data fromexport.arxiv.org. * Boundary markers: The output generated by the script does not include explicit delimiters to distinguish untrusted paper content from the agent's internal instructions. * Capability inventory: The skill is designed for information retrieval and lacks capabilities for file modification, system administration, or network exfiltration of sensitive data. * Sanitization: Abstract and title text is displayed as received from the API without sanitization to filter for potential instruction-based injection patterns.
Audit Metadata