talisman
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Uses
which,latex --version, andkpsewhichinSKILL.mdandreferences/environment.mdto detect local developer tools and LaTeX packages.- [COMMAND_EXECUTION]: Thescripts/prepare_logo.pyfile executes thersvg-convertbinary viasubprocess.runto process user-provided SVG logos.- [DYNAMIC_EXECUTION]: Programmatically generates and compiles LaTeX documents viaassets/Makefile, utilizing local engines such aspdflatex,latexmk, ortectonic.- [INDIRECT_PROMPT_INJECTION]: The skill ingests codebase content like comments and documentation (Phase 3 Research). Evidence Chain: (1) Ingestion points: Codebase files identified viafindandgrep. (2) Boundary markers: Absent, but explicit agent instructions are provided to treat input as untrusted. (3) Capability inventory: Subprocess calls, file system writes, and LaTeX compilation. (4) Sanitization: Specifically instructs the agent to scan collected text for AI instructions and strip or rephrase them before generating the manual.
Audit Metadata