search-skills
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the retrieval and processing of scholarly works from multiple external APIs (arXiv, PubMed, bioRxiv, etc.), representing a surface for indirect prompt injection via academic metadata.
- Ingestion points: External data enters the agent context through API responses containing paper titles, abstracts, and full-text content in files like
arxiv-api/SKILL.md,pubmed-api/SKILL.md, andarxiv-paper-processor/SKILL.md. - Boundary markers: The provided implementation examples do not include explicit prompt delimiters or instructions to ignore embedded commands within the retrieved research data.
- Capability inventory: The skill includes capabilities for network operations (
requests,curl), file system writes (arxiv-batch-reporting/SKILL.md), and the execution of external scripts (chatpaper-guide/SKILL.md). - Sanitization: There is no evidence of content sanitization or validation for the text retrieved from academic databases before it is displayed or processed by the agent.
- [EXTERNAL_DOWNLOADS]: The skill documents the installation of third-party research tools and libraries.
- Evidence: Instructions for
pip install arxiv-cli-toolsinarxiv-cli-tools/SKILL.mdandgit clone https://github.com/kaixindelele/ChatPaper.gitinchatpaper-guide/SKILL.md. - Context: These are standard installation procedures for well-known academic utilities from reputable sources.
- [COMMAND_EXECUTION]: The skill provides instructions for executing various command-line tools to process and analyze retrieved papers.
- Evidence: Usage of
docker runfor the GROBID service inarxiv-paper-processor/SKILL.mdand shell-based execution of thearxiv-cliandchat_paper.pytools in their respective guides.
Audit Metadata