latex-release-lint
Warn
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: MEDIUMDATA_EXFILTRATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The scripts/check_tex.py script implements a path traversal vulnerability in its collect_files and scan_log functions. By following \input and \include macros or reading log files from user-specified paths without validation, the script can be forced to read sensitive files outside the intended workspace (e.g., /etc/passwd).
- [COMMAND_EXECUTION]: The inclusion of subprocess.run in scripts/test_check_tex.py is a benign finding. It is used for automated testing of the linter script using a safe argument list format that avoids shell execution risks.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted LaTeX source code and build logs. This creates an indirect prompt injection surface where an attacker could embed malicious instructions in the LaTeX comments or text, potentially tricking the AI agent when it interprets the linter's summary output.
Audit Metadata