paper2poster

Pass

Audited by Gen Agent Trust Hub on Jul 26, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • Automated Workflow Execution: The skill uses subprocess calls to coordinate its internal rendering pipeline, such as triggering logo fitting and verifying final PDF outputs via pdfinfo. These operations are well-scoped within the skill's directory and intended for task automation.
  • Authorized External Services: The audio generation module (generate_audio.py) makes network requests to Microsoft Azure Cognitive Services for text-to-speech synthesis. This is a standard integration for providing the 'Listen' functionality described in the documentation.
  • Integrated Security Hardening: The skill includes mechanisms to intercept content delivery network (CDN) requests for MathJax and KaTeX, serving them instead from local bundled assets. This ensures the rendering process is deterministic, offline-capable, and reduces reliance on external servers.
  • Resource Management: Dependencies like edge-tts are standard packages used for the skill's core narration features. The installation of Chromium via Playwright is a standard requirement for the headless browser rendering used to generate the PDF and PNG artifacts.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 26, 2026, 05:07 PM
Security Audit — agent-trust-hub — paper2poster