kdp-typeset-interior
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script located at
${CLAUDE_PLUGIN_ROOT}/scripts/build-interior.py. This is used to coordinate multiple Typst compilation passes to handle geometry and margin calculations. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user data via manuscript files and a
book.tomlconfiguration file. - Ingestion points: Reads
book.tomland manuscript files (body) from the user's workspace. - Boundary markers: The instructions explicitly warn against hand-rolling escapes and recommend using Typst's
json()function to treat values as strings rather than markup. - Capability inventory: The skill has the ability to execute shell commands (python3) and read files from the workspace.
- Sanitization: Recommends using structured data ingestion (JSON) to prevent special characters (e.g., #, $, *, _) from being interpreted as Typst commands.
Audit Metadata