The Agent Skills Directory

[SAFE]: No malicious patterns or security vulnerabilities were detected in the skill instructions or scripts. The skill performs its stated purpose of academic paper management through official Zotero and arXiv channels.
[COMMAND_EXECUTION]: The skill uses the Bash tool to execute a local Python script (add_to_zotero.py). This is a standard and necessary operation for the skill's functionality, with execution restricted to the project environment.
[DATA_EXPOSURE]: The skill manages a Zotero API key by encouraging the use of environment variables or .env files. This aligns with standard security best practices for secret management, avoiding hardcoded credentials.
[INDIRECT_PROMPT_INJECTION]: The skill accepts paper metadata (abstracts, titles) from external sources, creating a theoretical attack surface for indirect prompt injection. However, the risk is negligible as the data is passed to structured API endpoints rather than being re-interpreted as commands by the agent.
Ingestion points: Command-line arguments in scripts/add_to_zotero.py (e.g., --abstract, --title).
Boundary markers: Not applicable for programmatic API interaction.
Capability inventory: File-system writes (PDF downloads to a configurable directory) and network access (Zotero API, arXiv).
Sanitization: The script uses standard string parsing for authors and tags, while the ZoteroClient handles data formatting for the API.

zotero-add