The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill references and connects to external resources at unbrowse.ai to provide MCP tool definitions and API access. These resources belong to the vendor's official infrastructure and are required for the skill's operation.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external content from Arxiv (including paper titles and abstracts) which could theoretically contain instructions designed to influence the agent's logic.
Ingestion points: Untrusted data enters the agent context via tool outputs from arxiv_org__read_page, arxiv_org__get_search_advanced, and arxiv_org__get_cs_ai_recent as defined in SKILL.md.
Boundary markers: The skill instructions do not specify the use of delimiters or 'ignore' instructions for the processed paper content.
Capability inventory: The skill provides tools for searching, browsing, and executing browser-based tasks via the unbrowse_run and unbrowse_browse_act tools.
Sanitization: There is no evidence of sanitization or filtering of the retrieved Arxiv content within the skill's instructions.

arxiv