arxiv-figures
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input from
.texfiles and image metadata to perform figure optimization. A malicious LaTeX file could contain crafted figure paths or filenames designed to inject parameters or commands into the shell execution pipeline. - Ingestion points:
\includegraphicscalls in.texfiles and image file headers/metadata (SKILL.md, Workflow section). - Boundary markers: None specified to delimit untrusted content from the shell command templates.
- Capability inventory: The skill utilizes numerous shell commands including
convert,ps2pdf,eps2eps,epstopdf,pdfcrop,optipng,pngquant, andjpegoptim. It also performs file system write operations when updating.texsources. - Sanitization: The workflow does not describe steps to sanitize or escape filenames parsed from the TeX source before they are passed to shell commands.
- [COMMAND_EXECUTION]: The skill is centered around executing a wide range of external CLI tools for image processing. While these are standard utilities, the execution occurs on user-provided files, which requires proper containment and validation.
Audit Metadata