insights-deck

Pass

Audited by Gen Agent Trust Hub on Aug 24, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes common Bash utilities such as ls, mkdir, and cp for file management, alongside LaTeX compilers like latexmk, pdflatex, and xelatex to generate presentations.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted content from an exported HTML report to generate its summary slides.
  • Ingestion point: The SKILL.md instructions specify reading data from log/insights/YYYY-MM-DD/insights-YYYY-MM-DD-log.html (Phase 2, Step 1).
  • Boundary markers: The skill includes a clear restrictive scope: "Do NOT use insights suggestions to create plans, rules, CLAUDE.md edits, or other follow-up actions during this skill's execution."
  • Capability inventory: File writing, editing, and execution of shell commands via the permitted Bash tools.
  • Sanitization: No explicit content sanitization is described, as the agent is expected to summarize the findings into a static document.
  • [DYNAMIC_EXECUTION]: During the compilation process, the skill generates a .latexmkrc configuration file (Phase 2, Step 4). This file contains a Perl-based post-build hook (system("cp ...")) used to manage the location of the resulting PDF. This is standard practice for latexmk workflows.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 24, 2026, 06:16 AM
Security Audit — agent-trust-hub — insights-deck