transfer-old-latex-to-new
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The module
scripts/core/compiler.pyutilizessubprocess.runto execute LaTeX compilation sequences. While the commands executed are configurable via thepass_sequencefield, the skill's logic is designed to invoke standard academic tools likexelatex,bibtex, andbiberto process project files. - [INDIRECT_PROMPT_INJECTION]: The skill processes external, untrusted content from various file formats (LaTeX, Word, PDF, Markdown). As the AI agent is instructed to summarize, optimize, or adapt this content, it is exposed to potential indirect prompt injection embedded within the source documents. The skill attempts to mitigate disruption to functional code via the
ReferenceGuardiancomponent, which replaces LaTeX commands with unique placeholders during AI processing. - [SAFE]: The skill implements a robust
SecurityManagerthat validates all file write operations against a whitelist defined inconfig.yaml. This prevents the skill from modifying sensitive system or template files (e.g.,.cls,.sty, ormain.tex), ensuring that the tool only impacts the intended content layers.
Audit Metadata