Arxiv Summarizer Orchestrator

• Outcome: Pass
• Latest audit: May 28, 2026 at 11:12 AM UTC
• Version:
  0.1.1

Overview

This skill transparently orchestrates arXiv paper collection, summarization, and reporting, with no evidence of hidden access, credential use, exfiltration, or destructive behavior.

Install this only if you also trust the three required arXiv sub-skills. Run it in a dedicated output directory, keep the documented parallelism limits, use simple explicit parameter values such as a plain language name, and enable scheduling only when you want recurring automated arXiv collection.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 80% confidence
• Finding: The default prompt is a broad, unconditional activation phrase that can trigger the full workflow without clear scope, guardrails, or user confirmation. In an orchestration skill that fans out to multiple sub-skills, this increases the chance of unintended execution, overbroad data collection/processing, and misuse through prompt injection or accidental invocation.

VirusTotal

63/63 vendors flagged this skill as clean.