The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill fetches and displays paper titles, authors, and abstracts from the public arXiv repository. Because arXiv is a public platform, it is possible for a user to upload a paper with a maliciously crafted abstract or title containing instructions meant to hijack the agent's reasoning or behavior when the results are parsed.
Ingestion points: Untrusted external data enters the agent context through the client.search call in scripts/search_arxiv.py, which pulls data from the arXiv API.
Boundary markers: The output format does not include specific delimiters or "ignore previous instructions" warnings to isolate the untrusted paper content from the agent's primary instructions.
Capability inventory: The skill is authorized to use Bash, Write, and Read tools, which could lead to file system manipulation or unauthorized command execution if the agent follows instructions embedded in a paper abstract.
Sanitization: The script performs no sanitization, escaping, or instruction-filtering on the text retrieved from the remote API before printing it to the output stream.

arxiv-search