venue-templates
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/validate_format.pyuses thesubprocess.runfunction to invoke external binariespdfinfoandpdffonts. These tools are utilized to verify document properties such as page counts and font compliance against venue-specific requirements. The implementation uses argument lists rather than shell strings, which is a secure practice that prevents shell injection. - [PROMPT_INJECTION]: The instructions in
SKILL.mdintroduce a specific persona, "Nano Banana Pro," and direct the agent to adopt certain behaviors, such as automatically suggesting or generating scientific schematics. While this overrides the agent's default persona and behavior for the purpose of the skill's branding, it does not attempt to bypass safety filters or ignore prior security instructions. - [EXTERNAL_DOWNLOADS]: The skill contains a comprehensive list of references to official author guidelines and submission portals for well-known scientific organizations, including Nature, Science, PLOS, IEEE, and various federal funding agencies (NSF, NIH). These links are provided for informational purposes and target trusted domains.
- [COMMAND_EXECUTION]: The
SKILL.mddocumentation provides examples of how to compile LaTeX documents usingpdflatexandlatexmk. These are standard tools for document generation and do not include dangerous flags such as--shell-escapeby default.
Audit Metadata