The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes curl to fetch data from well-known academic repositories (arXiv and Semantic Scholar). These commands are used as intended for a research skill to retrieve XML and JSON metadata.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data (academic paper titles and abstracts) which could be used as a vector for indirect prompt injection.
Ingestion points: Paper metadata is ingested from export.arxiv.org and api.semanticscholar.org in SKILL.md and scripts/search_arxiv.py.
Boundary markers: None. The instructions do not specify delimiters or warnings to ignore instructions embedded within the fetched academic content.
Capability inventory: The skill performs network operations via curl and urllib.request, and local data processing via python3.
Sanitization: The skill performs minor formatting (e.g., removing newlines with .replace('\n', ' ')) but lacks safety filters to detect or neutralize malicious instructions in paper summaries.
[SAFE]: Automated alerts regarding remote code execution are false positives. The code snippets in SKILL.md use python3 -c and python3 -m json.tool to parse data from the standard input (the output of curl). The code being executed is locally defined within the skill manifest, not downloaded from the remote server.

arxiv