readable-arxiv
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads PDF files from the well-known scientific repository
arxiv.orgusingcurl. - [COMMAND_EXECUTION]: The skill executes shell commands to perform network requests (
curl) and to run the PDF extraction tool (npx pdfvision). - [DYNAMIC_EXECUTION]: The skill uses
npxto fetch and execute thepdfvisionpackage at runtime. This package is an official resource provided by the skill author. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes content from external PDF files, which could contain adversarial instructions designed to influence the agent's behavior.
- Ingestion points: Text output from the
pdfvisiontool or a multimodalReadtool processing/tmp/paper.pdf. - Boundary markers: None; the extracted content is not wrapped in delimiters or accompanied by instructions to ignore embedded commands.
- Capability inventory: The skill has shell execution capabilities (
curl,npx) and file system access to/tmp. - Sanitization: There is no specified logic to sanitize or validate the content extracted from the PDF before it is processed by the agent.
Audit Metadata