didactic-decks
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The build process, coordinated by
scripts/build_deck.shandscripts/build_decks_detached.sh, executes multiple system utilities and build tools includingmake,pdflatex,biber,pdftotext,pdfinfo, andblack. These tools are necessary for compiling the LaTeX source and running verification checks. - [DYNAMIC_EXECUTION]: The skill relies on
PythonTeXto execute Python code snippets embedded within the lecture source (contents.nw) at build time. Furthermore, thepdflatexcommand is invoked with the-shell-escapeflag, which is required by themintedpackage to perform syntax highlighting through the external Pygments library. - [EXTERNAL_DOWNLOADS]: The
Makefiletemplate includes a target to initialize a Python virtual environment viamentipy init. This fetches thementipypackage from the Python Package Index (PyPI), which is a well-known and established service for Python software distribution. - [INDIRECT_PROMPT_INJECTION]: The skill processes
contents.nwandabstract.texfiles, which contain the source material for the decks and represent the primary data ingestion surface. - Ingestion points: Source files (
.nw,.tex) are read by the weave/tangle processes and the verification scripts (scripts/cutcheck.py,scripts/check_margin_notes.py). - Boundary markers: None; the files are treated as trusted source code within the toolchain.
- Capability inventory: The skill has the capability to execute arbitrary code via LaTeX's shell-escape and PythonTeX's embedded scripts, as well as file system read/write operations for build artifacts.
- Sanitization: The skill assumes the integrity of the project source files, and standard compilation errors from LaTeX or Python would halt the process in case of malformed input.
Audit Metadata