The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill performs network requests to export.arxiv.org and api.semanticscholar.org to retrieve academic metadata and citations. These are well-known, reputable academic services.
[COMMAND_EXECUTION]: Multiple curl commands are used to fetch paper data. This is the primary intended functionality of the skill and follows standard practices for CLI-based research tools.
[REMOTE_CODE_EXECUTION]: Automated scanners flagged several curl | python patterns as high risk. Detailed analysis shows these are false positives: the commands pipe XML or JSON response data into local Python modules (like json.tool) or static inline parsing scripts included in the skill. The remote content is treated as data to be parsed, not code to be executed.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data in the form of academic paper abstracts and titles.
Ingestion points: API responses from arXiv and Semantic Scholar processed in SKILL.md.
Boundary markers: None used; paper content is parsed directly into output strings.
Capability inventory: Subprocess execution via curl and tool calls to web_extract.
Sanitization: Uses standard xml.etree.ElementTree and JSON parsers, which provide data/code separation, although the agent remains susceptible to instructions embedded within paper abstracts.

arxiv