paper2blog

Pass

Audited by Gen Agent Trust Hub on Jul 12, 2026

Risk Level: SAFE
Full Analysis
  • Subprocess Usage: The skill uses Python's subprocess module to call external utilities like pdftotext (for extracting text from PDFs) and libreoffice (for rendering document previews). These operations are essential for its functionality and are implemented using best practices, such as passing arguments as a list to prevent command injection.
  • External Dependencies: The project specifies several standard Python packages in requirements.txt, including python-docx, PyMuPDF, Pillow, and numpy. These are widely used, reputable libraries for document and image manipulation.
  • Quality Assurance Mechanisms: A dedicated script, check_blog_package.py, acts as a quality gate. It verifies the consistency of the bilingual output, checks for placeholder text, and validates the layout of the generated documents.
  • Data Handling: The skill operates on local file paths and does not exhibit any patterns of unauthorized data access or network exfiltration. It focuses on processing academic materials within a defined output directory.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 12, 2026, 02:28 PM
Security Audit — agent-trust-hub — paper2blog