complete-example
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes the
xelatexandbibtextools via the Pythonsubprocessmodule to verify that generated LaTeX content compiles correctly. The commands are constructed using a fixed list of arguments, and the compiler engine name is retrieved from a configuration file. - [INDIRECT_PROMPT_INJECTION]: The skill processes project assets (LaTeX files, BibTeX entries, and source code) to provide context for the AI generation process. To mitigate the risk of malicious data influencing the agent, the
SecurityManagerclass performs post-generation scanning and sanitization, filtering out a blacklist of potentially dangerous LaTeX keywords and commands. - [DATA_EXFILTRATION]: The skill provides a mechanism for reporting bugs and design flaws to the author's specific GitHub repository (
huangwb8/bensz-bugs) using theghCLI tool. This functionality is intended for error reporting and is only activated upon explicit user request. - [SAFE_PRACTICE]: The skill implements a robust security framework that includes mandatory file backups before modification, path normalization to prevent directory traversal, and strict access controls that prevent the modification of critical system files like
main.texand@config.tex.
Audit Metadata