scholar-latex-organizer
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell commands to perform file system operations and template verification. It uses
unzipto extract user-provided archives,findandgrepto inventory and analyze LaTeX sources, andpdflatexorbibtexto confirm that the organized template compiles successfully.\n- [EXTERNAL_DOWNLOADS]: The skill uses theWebFetchtool to retrieve conference-specific submission requirements and deadlines from external URLs provided by the user.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources, which is a common pattern for file organization tools.\n - Ingestion points: Contents of the template .zip file (Phase 1) and external web content fetched via conference URLs (Phase 3).\n
- Boundary markers: None. The skill does not implement explicit delimiters or instruction-bypass warnings when processing extracted text or web data.\n
- Capability inventory: The skill has access to
Bashfor command execution,Writefor file modification, andWebFetchfor network access.\n - Sanitization: The skill uses standard text processing utilities like
grepandsedfor data extraction but does not perform specific sanitization of external content before incorporating it into the finalREADME.md.
Audit Metadata