latex-posters

Pass

Audited by Gen Agent Trust Hub on Jun 14, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/generate_schematic.py uses subprocess.run to call a secondary Python script (generate_schematic_ai.py). This is used for task modularization and passes arguments as a list without invoking a shell, which is a secure practice.
  • [EXTERNAL_DOWNLOADS]: The scripts/generate_schematic_ai.py script performs HTTP POST requests to the OpenRouter API (openrouter.ai) to facilitate AI-driven image generation and quality assessment. OpenRouter is a well-known service for LLM API aggregation.
  • [CREDENTIALS_UNSAFE]: The automation scripts retrieve sensitive API keys exclusively through environment variables or local .env files. The documentation correctly instructs users to manage secrets using these standard methods rather than hardcoding them, aligning with security best practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 14, 2026, 09:23 AM
Security Audit — agent-trust-hub — latex-posters