typst-paper

Pass

Audited by Gen Agent Trust Hub on May 1, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/compile.py uses subprocess.run to invoke the typst command-line utility. This is a primary function of the skill to enable document building and export.
  • [EXTERNAL_DOWNLOADS]: The scripts/online_bib_verify.py script makes outgoing HTTP requests to api.crossref.org and api.semanticscholar.org. These operations are used solely to verify paper metadata and retrieve valid bibliography information from reputable academic sources.
  • [COMMAND_EXECUTION]: The routing logic in SKILL.md utilizes the uv tool to execute local Python scripts. This is a standard practice for managing Python environments and running modular project scripts.
Audit Metadata
Risk Level
SAFE
Analyzed
May 1, 2026, 11:24 AM