venue-templates
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains standard LaTeX templates, comprehensive writing guides, and utility scripts designed to assist with academic publishing and grant applications. All code and documentation are consistent with the stated purpose.
- [COMMAND_EXECUTION]: The
scripts/validate_format.pyscript executes local PDF utilities (pdfinfo,pdffonts) to inspect document metadata and embedded fonts. These system calls are performed using safe subprocess patterns with list-based arguments, effectively mitigating shell injection risks. - [INDIRECT_PROMPT_INJECTION]: The skill includes functionality to customize templates based on user-supplied strings (e.g., paper titles, author names) and to validate external PDF files. This processes untrusted data as part of its primary workflow; however, the skill provides explicit warnings about LaTeX escaping and uses safe command execution patterns.
Audit Metadata