light-typesetting
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: Indirect Prompt Injection Surface.
- Ingestion points: The scripts
scripts/precheck_log.pyandscripts/submission_check.pyingest untrusted data from LaTeX log files,.texsource files, and.pdffiles. - Boundary markers: There are no explicit boundary markers or instructions to ignore embedded commands when the agent processes the output of these validation scripts.
- Capability inventory: The skill environment allows execution of shell commands via
latexmk,python, andnode. - Sanitization: The scripts use regular expressions to extract specific patterns but do not perform comprehensive sanitization to prevent the extracted text from containing instructions that might bypass agent safeguards.
- [COMMAND_EXECUTION]: The skill facilitates the execution of local scripts and typesetting engines.
- The Python scripts
scripts/precheck_log.pyandscripts/submission_check.pyare used to validate document compliance and compilation success. - The Node.js script
assets/docx_template.jsis executed to generate Word documents using thedocxlibrary. latexmkis used to automate the LaTeX compilation process, including the use of-shell-escapefor specific packages likeminted.- [EXTERNAL_DOWNLOADS]: The skill references several well-known and trusted external sources for LaTeX templates.
- Instructions guide the user to download official templates from publisher websites (e.g., IEEE, ACM), Overleaf's gallery, and CTAN.
- TeX package management is performed via
tlmgrandtinytex, which fetch packages from official TeX repositories.
Audit Metadata