didactic-decks

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The build process, coordinated by scripts/build_deck.sh and scripts/build_decks_detached.sh, executes multiple system utilities and build tools including make, pdflatex, biber, pdftotext, pdfinfo, and black. These tools are necessary for compiling the LaTeX source and running verification checks.
  • [DYNAMIC_EXECUTION]: The skill relies on PythonTeX to execute Python code snippets embedded within the lecture source (contents.nw) at build time. Furthermore, the pdflatex command is invoked with the -shell-escape flag, which is required by the minted package to perform syntax highlighting through the external Pygments library.
  • [EXTERNAL_DOWNLOADS]: The Makefile template includes a target to initialize a Python virtual environment via mentipy init. This fetches the mentipy package from the Python Package Index (PyPI), which is a well-known and established service for Python software distribution.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes contents.nw and abstract.tex files, which contain the source material for the decks and represent the primary data ingestion surface.
  • Ingestion points: Source files (.nw, .tex) are read by the weave/tangle processes and the verification scripts (scripts/cutcheck.py, scripts/check_margin_notes.py).
  • Boundary markers: None; the files are treated as trusted source code within the toolchain.
  • Capability inventory: The skill has the capability to execute arbitrary code via LaTeX's shell-escape and PythonTeX's embedded scripts, as well as file system read/write operations for build artifacts.
  • Sanitization: The skill assumes the integrity of the project source files, and standard compilation errors from LaTeX or Python would halt the process in case of malformed input.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 11:37 PM