research-arxiv-scout
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill exposes an indirect prompt injection surface by ingesting untrusted paper metadata (titles and abstracts) from the arXiv API and other discovery tools. This untrusted content is processed by the agent to score research and trigger downstream actions. Evidence Chain: Ingestion point is the arXiv API and RSS feeds; Boundary markers are absent in the instructions; Capability inventory includes writing to source JSON files and project ledgers, and executing convergence scripts; Sanitization of the abstract text is not explicitly defined.\n- [COMMAND_EXECUTION]: The skill executes local Python scripts to generate search queries and perform analysis. It calls scripts/generate_arxiv_scout_queries.py and instructs the agent to run converge_killer_features.py in a sibling directory. These tools are part of the skill's codebase and intended workflow.\n- [EXTERNAL_DOWNLOADS]: The agent is instructed to fetch research metadata from established and well-known services including arXiv, Hugging Face, Semantic Scholar, and OpenAlex. These interactions are fundamental to the skill's purpose and use official endpoints for scholarly metadata.
Audit Metadata