latex-posters
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/generate_schematic.pyuses thesubprocess.runfunction to execute a local Python helper script. This is used to handle the iterative process of generating and refining scientific diagrams through an external API. The command is constructed as a list of arguments, which prevents shell-level command injection. - [EXTERNAL_DOWNLOADS]: The skill communicates with the OpenRouter API (
openrouter.ai) to generate images and perform quality reviews using AI models. This is a well-known service used here for its intended functionality of scientific element generation. - [DATA_EXPOSURE]: The skill processes user-provided prompts and sends them to the OpenRouter API. It also reads the generated image files for AI-powered quality review. This behavior is documented and is a core part of the skill's functionality for generating visual elements.
Audit Metadata