arxiv
Pass
Audited by Gen Agent Trust Hub on Apr 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized access attempts were identified in the skill's code or metadata.
- [EXTERNAL_DOWNLOADS]: The skill facilitates downloading PDF files and paper metadata from ArXiv, a well-known and trusted academic service. It relies on the reputable arxiv Python package for these operations.
- [PROMPT_INJECTION]: The skill retrieves external content such as paper titles and abstracts which are then presented to the agent, creating a surface for indirect prompt injection.
- Ingestion points: Data enters via the ArXiv API within the arxiv_search and arxiv_get_paper tools in tools.py.
- Boundary markers: The skill returns structured dictionary data to the agent; no specific prompt delimiters are implemented in the tool itself.
- Capability inventory: The skill has the ability to write files to the local system (PDF downloads) via tools.py.
- Sanitization: Filenames for downloaded papers are derived from ArXiv IDs and are sanitized by replacing slashes with underscores.
Audit Metadata