latex
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/build.pyusessubprocess.runto execute thelatexmkbuild orchestrator. This is the skill's primary function, enabling the agent to compile LaTeX documents into PDFs. The implementation follows security best practices by passing arguments as a list and avoiding the use ofshell=Truefor process invocation. - [PROMPT_INJECTION]: The skill contains an indirect prompt injection surface as outlined in
references/error-triage.md, which instructs the agent to read and triage LaTeX.logfiles. Maliciously crafted LaTeX source files could generate logs containing hidden instructions intended to manipulate the agent's behavior during the error diagnosis phase. - Ingestion points: LaTeX log files (
.log) are read and analyzed by the agent according to instructions inreferences/error-triage.md. - Boundary markers: There are no explicit boundary markers or instructions telling the agent to treat the log content as untrusted data or to ignore embedded commands.
- Capability inventory: The skill includes scripts for executing shell commands (
scripts/build.py) and deleting intermediate LaTeX files (scripts/clean.py). - Sanitization: The skill does not perform any sanitization or validation of the log file content before analysis.
Audit Metadata