The Agent Skills Directory

[CREDENTIALS_UNSAFE]: The skill's setup instructions direct the agent to pass the user's API key as a plaintext command-line argument using the scripts/search setup <api-key> command. This practice is insecure as command-line arguments are often recorded in shell history files and are visible in process monitoring tools like ps or top.- [COMMAND_EXECUTION]: The skill relies on the execution of shell commands and local scripts. It instructs the agent to use the find utility to locate scripts within the user's home directory (~/.claude/plugins/cache) and execute them with user-provided search queries.- [PROMPT_INJECTION]: The skill processes untrusted external data retrieved from arXiv. This creates a surface for indirect prompt injection.
Ingestion points: Full-text article content is retrieved via the scripts/search tool and included in the agent's context.
Boundary markers: The provided instructions do not include delimiters or specific instructions to ignore embedded prompts within the retrieved paper content.
Capability inventory: The agent has the capability to execute shell commands and scripts.
Sanitization: There is no evidence of sanitization or filtering of the external article content before it is processed by the agent.

arxiv-search