The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill fetches and processes full-text content from external arXiv preprints, which creates a surface for indirect prompt injection where malicious instructions embedded in research papers could attempt to influence agent behavior.
Ingestion points: Data is ingested via the scripts/search command, which returns article titles, URLs, and full content from https://api.valyu.ai/v1/search.
Boundary markers: The instructions do not specify any delimiters or boundary markers to isolate the fetched paper content from the agent's instructions.
Capability inventory: The agent is authorized to execute shell commands (bash, jq, find) and perform network requests to the Valyu API.
Sanitization: There is no evidence of sanitization or filtering applied to the content returned by the search API before it is presented to the agent.
[COMMAND_EXECUTION]: The skill instructions direct the agent to use the find utility to locate its own scripts in the local environment and execute them via bash, specifically scripts/search. While this is used for functional path resolution within the plugin architecture, it involves active shell interaction with the local filesystem.

arxiv-search