venue-templates
Pass
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/validate_format.pyutilizes thesubprocess.run()function to execute external PDF analysis utilities (pdfinfo,pdffonts). These calls are constructed safely using argument lists rather than shell strings, which effectively mitigates the risk of command injection. - [SAFE]: Analysis of the skill's instructions, metadata, and scripts revealed no evidence of prompt injection, data exfiltration, or persistence mechanisms. The skill functions as a legitimate tool for academic manuscript preparation.
- [SAFE]: Template customization in
scripts/customize_template.pyis performed using regex-based text substitution on local LaTeX source files and does not involve the execution of user-provided data as instructions.
Audit Metadata