chinese-copyright-application
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
grepcommands to search for version identifiers within the user's project files and runsxelatexto compile documentation. - [EXTERNAL_DOWNLOADS]: Instructions are provided to install LaTeX dependencies through official and well-known package managers such as Homebrew (macOS) and APT (Linux).
- [PRIVILEGE_ESCALATION]: The skill uses
sudoto facilitate the installation of system-level LaTeX packages and updates viaaptandtlmgr. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted source code from project directories to generate application materials, creating a vulnerability surface where embedded content could influence the generation process.
- Ingestion points: Files with extensions like
.js,.py,.ts, and.jsonin the user-specified project path are read bygrepand the analysis script. - Boundary markers: The Python script uses filename separators (
// ========== path/to/file.js ==========) when concatenating code for the source materials. - Capability inventory: The agent invokes local shell commands (
grep), a provided Python analysis script, and document compilers (xelatex). - Sanitization: The analysis script includes escaping for LaTeX Verbatim blocks (
escape_latex_verbatim) to ensure code snippets do not prematurely close LaTeX environments.
Audit Metadata