typst-paper
Pass
Audited by Gen Agent Trust Hub on May 23, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
scripts/online_bib_verify.pyscript makes network requests toapi.crossref.organdapi.semanticscholar.org. These are well-known and trusted academic services used to verify bibliographic metadata and DOI validity. The data sent to these services is restricted to publication titles and DOIs. - [COMMAND_EXECUTION]: The skill executes the
typstcommand-line utility via subprocess calls inscripts/compile.pyto compile manuscripts and list system fonts. This is a standard and necessary function for a document preparation assistant. - [PROMPT_INJECTION]: The skill ingests untrusted manuscript text (e.g., abstract and experiment sections) and interpolates it into prompts for the AI agent to facilitate analysis and rewriting. While this presents an indirect prompt injection surface, it is consistent with the primary purpose of a writing assistant, and the instructions prioritize preserving the manuscript's internal Typst syntax and labels.
Audit Metadata