aris-paper-poster
Fail
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: HIGHCOMMAND_EXECUTIONCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSPROMPT_INJECTIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions to execute 'sudo' commands for system-wide package installation (e.g., MacTeX), which constitutes a privilege escalation vector on the host system.
- [CREDENTIALS_UNSAFE]: The skill checks for and accesses '~/.claude/feishu.json', a configuration file in a sensitive directory that typically stores API keys or integration tokens for the Feishu platform.
- [EXTERNAL_DOWNLOADS]: The skill downloads the TeX Live installer from 'mirror.ctan.org' and various Python dependencies ('pdf2image', 'python-pptx', 'pymupdf') from public package registries. These downloads are performed from well-known and established technology services.
- [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it ingests untrusted LaTeX data from user-provided files in the paper directory ($PAPER_DIR). This content is extracted and interpolated into generated LaTeX templates and Python scripts without sanitization or boundary markers. Ingestion points: 'paper/main.tex' and 'paper/sections/*.tex'. Boundary markers: Absent. Capability inventory: Bash, Write, Edit, and Python execution. Sanitization: Absent.
- [REMOTE_CODE_EXECUTION]: The skill executes a remotely downloaded installer ('install-tl') and manages LaTeX packages via 'tlmgr', which involves executing code sourced from external repositories at runtime.
Recommendations
- AI detected serious security threats
Audit Metadata