arxiv-metadata
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches paper metadata from the well-known and official arXiv API (
export.arxiv.org). All network requests are targeted to this specific scientific service. - [COMMAND_EXECUTION]: Executes a local Python script
scripts/arxiv_metadata.pyto parse IDs and retrieve paper information. The script uses strict regular expressions to validate user-supplied IDs before use. - [PROMPT_INJECTION]: Presents a potential surface for indirect prompt injection common to data-fetching tools. Since it retrieves paper titles and author names from an external database, the agent should treat the resulting strings as untrusted data.
- Ingestion points: Data is ingested from the arXiv XML API.
- Boundary markers: Metadata is returned to the agent in structured JSON format.
- Capability inventory: The skill performs simple read operations from the API and prints results.
- Sanitization: The skill performs standard XML parsing but does not sanitize the contents of strings like titles or summaries for potential LLM instructions.
Audit Metadata