draft-marker-discipline
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The prose_wordcount.py script executes the detex command-line utility to process LaTeX text. * Evidence: The script uses subprocess.run(["detex", "-n"], input=text, capture_output=True, text=True) to invoke the local tool. * Analysis: This is a legitimate use of a local utility required for the skill's primary function. The script securely passes data to the utility via standard input and uses a fixed argument list, which prevents command injection vulnerabilities.
Audit Metadata