scholar-latex-organizer

Pass

Audited by Gen Agent Trust Hub on Jul 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes shell commands to perform file system operations and template verification. It uses unzip to extract user-provided archives, find and grep to inventory and analyze LaTeX sources, and pdflatex or bibtex to confirm that the organized template compiles successfully.\n- [EXTERNAL_DOWNLOADS]: The skill uses the WebFetch tool to retrieve conference-specific submission requirements and deadlines from external URLs provided by the user.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources, which is a common pattern for file organization tools.\n
  • Ingestion points: Contents of the template .zip file (Phase 1) and external web content fetched via conference URLs (Phase 3).\n
  • Boundary markers: None. The skill does not implement explicit delimiters or instruction-bypass warnings when processing extracted text or web data.\n
  • Capability inventory: The skill has access to Bash for command execution, Write for file modification, and WebFetch for network access.\n
  • Sanitization: The skill uses standard text processing utilities like grep and sed for data extraction but does not perform specific sanitization of external content before incorporating it into the final README.md.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 17, 2026, 12:17 PM
Security Audit — agent-trust-hub — scholar-latex-organizer