Security audit
Security checks for vulnerabilities and agentic risk
This skill performs a disclosed arXiv astronomy paper search using a small local Python parser, with no evidence of credential access, persistence, exfiltration, or destructive behavior.
Install only if you are comfortable with the agent sending your search topic to arXiv and creating/running a small local Python helper for formatting results; the skill would be clearer if it limited activation to astro-ph searches and cleaned up its helper file.
The manifest describes the skill as only embedding a Python XML parser, but the runbook also performs live outbound network access to arXiv and retrieves remote content. This mismatch weakens transparency and policy enforcement because reviewers or users may approve a seemingly narrow parsing skill without realizing it has data-fetching capability.
The instruction says to run the skill 'when the user requests a literature search for a specific topic,' which is a very broad activation condition that could overlap with many ordinary research-related requests. It does not define narrower trigger phrases, scope limits, or exclusion cases, making unintended invocation more likely.
The runbook instructs the agent to create and execute a standalone Python script, introducing arbitrary code-execution behavior beyond the narrowly declared purpose. Even though the embedded script is simple, enabling file creation and code execution expands the attack surface and could be repurposed if the skill content is modified or combined with untrusted input.
