venue-templates

Pass

Audited by Gen Agent Trust Hub on Jun 30, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/validate_format.py utilizes the pdfinfo and pdffonts system utilities to analyze PDF metadata and font usage. Additionally, scripts/generate_schematic.py acts as a wrapper to execute a secondary AI generation script. All such operations are performed using the subprocess.run method with command strings passed as lists, which is a robust defense against shell command injection.
  • [EXTERNAL_DOWNLOADS]: The scripts/generate_schematic_ai.py component performs network requests to the OpenRouter API (openrouter.ai) to facilitate scientific diagram generation and quality review via large language models. This process is triggered by explicit user instructions and requires an API key provided through environment variables. The network activity is restricted to the legitimate and documented functionality of the skill.
  • [SAFE]: Comprehensive analysis of the provided LaTeX templates, writing guides, and utility scripts revealed no evidence of prompt injection, data exfiltration, obfuscation, or unauthorized privilege escalation. The skill's architecture prioritizes user-controlled data handling and adheres to standard development practices for scientific workflows.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 30, 2026, 08:08 PM
Security Audit — agent-trust-hub — venue-templates