venue-templates
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/validate_format.pyutilizes thepdfinfoandpdffontssystem utilities to analyze PDF metadata and font usage. Additionally,scripts/generate_schematic.pyacts as a wrapper to execute a secondary AI generation script. All such operations are performed using thesubprocess.runmethod with command strings passed as lists, which is a robust defense against shell command injection. - [EXTERNAL_DOWNLOADS]: The
scripts/generate_schematic_ai.pycomponent performs network requests to the OpenRouter API (openrouter.ai) to facilitate scientific diagram generation and quality review via large language models. This process is triggered by explicit user instructions and requires an API key provided through environment variables. The network activity is restricted to the legitimate and documented functionality of the skill. - [SAFE]: Comprehensive analysis of the provided LaTeX templates, writing guides, and utility scripts revealed no evidence of prompt injection, data exfiltration, obfuscation, or unauthorized privilege escalation. The skill's architecture prioritizes user-controlled data handling and adheres to standard development practices for scientific workflows.
Audit Metadata