aris-paper-compile
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: Indirect prompt injection vulnerability surface. The skill ingests untrusted data from LaTeX source files and compilation logs.
- Ingestion points:
compile.log,paper/main.tex,paper/references.bib, andpaper/sections/*.tex. - Boundary markers: Absent. The agent is instructed to read log files and source files directly without specific delimiters or instructions to ignore embedded agent commands.
- Capability inventory: The skill uses
Bash(*),Write,Edit,Grep, andGlobtools across all files, enabling it to modify files and execute shell commands based on its diagnosis of the input files. - Sanitization: No explicit sanitization or validation of the LaTeX source or log content is performed before the agent interprets it for error fixing.
- [COMMAND_EXECUTION]: Automated execution of shell commands for LaTeX processing (
latexmk,pdflatex,bibtex) and document verification (pdfinfo,pdftotext,pdffonts). - [EXTERNAL_DOWNLOADS]: Skill instructions involve installing system packages via
apt-get,brew, orconda, and automated commands to install LaTeX packages viatlmgrfrom official repositories.
Audit Metadata