paper2poster
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Automated Workflow Execution: The skill uses
subprocesscalls to coordinate its internal rendering pipeline, such as triggering logo fitting and verifying final PDF outputs viapdfinfo. These operations are well-scoped within the skill's directory and intended for task automation. - Authorized External Services: The audio generation module (
generate_audio.py) makes network requests to Microsoft Azure Cognitive Services for text-to-speech synthesis. This is a standard integration for providing the 'Listen' functionality described in the documentation. - Integrated Security Hardening: The skill includes mechanisms to intercept content delivery network (CDN) requests for MathJax and KaTeX, serving them instead from local bundled assets. This ensures the rendering process is deterministic, offline-capable, and reduces reliance on external servers.
- Resource Management: Dependencies like
edge-ttsare standard packages used for the skill's core narration features. The installation of Chromium via Playwright is a standard requirement for the headless browser rendering used to generate the PDF and PNG artifacts.
Audit Metadata