typesetting-latex

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The CI and build artifacts in the skill will fetch and execute external code at runtime — e.g. GitHub Actions referenced by "uses: actions/checkout@v3" (https://github.com/actions/checkout), "uses: actions/upload-artifact@v3" (https://github.com/actions/upload-artifact) and "uses: softprops/action-gh-release@v1" (https://github.com/softprops/action-gh-release), and the Dockerfile's base image "texlive/texlive:latest" (docker.io/texlive/texlive:latest) are all remote resources pulled and executed during workflows/builds.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (low risk: 0.30). The skill includes explicit system-modifying commands (sudo apt-get in the GitHub Actions workflow, package installs in the Dockerfile/tlmgr, and a Makefile using -shell-escape which allows arbitrary shell execution), so it does encourage operations that change the host or runner environment even though it doesn't instruct creating users or bypassing security directly.