readable-arxiv

Pass

Audited by Gen Agent Trust Hub on Sep 12, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads PDF files from the well-known scientific repository arxiv.org using curl.
  • [COMMAND_EXECUTION]: The skill executes shell commands to perform network requests (curl) and to run the PDF extraction tool (npx pdfvision).
  • [DYNAMIC_EXECUTION]: The skill uses npx to fetch and execute the pdfvision package at runtime. This package is an official resource provided by the skill author.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes content from external PDF files, which could contain adversarial instructions designed to influence the agent's behavior.
  • Ingestion points: Text output from the pdfvision tool or a multimodal Read tool processing /tmp/paper.pdf.
  • Boundary markers: None; the extracted content is not wrapped in delimiters or accompanied by instructions to ignore embedded commands.
  • Capability inventory: The skill has shell execution capabilities (curl, npx) and file system access to /tmp.
  • Sanitization: There is no specified logic to sanitize or validate the content extracted from the PDF before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 12, 2026, 02:54 AM