The Agent Skills Directory

[DATA_EXFILTRATION]: The script scripts/audit.py allows arbitrary file access through the MANUSCRIPT_PATH input parameter. The _manuscript_text function in scripts/audit.py extracts a file path from the manuscript_package field and uses Path.expanduser().read_text() to read its content. This mechanism enables access to sensitive files like ~/.ssh/id_rsa or configuration files. While the script only outputs excerpts matching academic regex patterns, this behavior presents a risk of sensitive data exposure.
[COMMAND_EXECUTION]: The skill executes a Python script (scripts/audit.py) as its entrypoint. This script processes manuscript content provided via standard input, implementing its own logic to read additional files based on instructions within that content.

paper-quality-gate