The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The project extraction logic in both the CLI (src/cli.ts) and the MCP server (src/mcp.ts) is vulnerable to a Zip Slip attack.
The pull and pull_project commands use path.join() to combine the target directory with file paths extracted from the Overleaf project ZIP archive without validating that the final path remains within the intended directory.
A malicious Overleaf project containing files with directory traversal patterns (e.g., ../../.bashrc or ../../.ssh/authorized_keys) could overwrite sensitive system files when the project is extracted.
[EXTERNAL_DOWNLOADS]: The skill specifies an unverifiable and highly suspicious version of the zod dependency.
Both package.json and package-lock.json reference zod version 4.4.3, which does not exist in the official npm registry where the current stable release is 3.x.
The code in src/mcp.ts uses a non-standard import path: import { z } from 'zod/v3'. This mismatch between the declared version (4.x) and the import path (v3) further indicates a suspicious or malicious package source.

overleaf