aris-paper-poster

Fail

Audited by Gen Agent Trust Hub on May 6, 2026

Risk Level: HIGHCOMMAND_EXECUTIONCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSPROMPT_INJECTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides instructions to execute 'sudo' commands for system-wide package installation (e.g., MacTeX), which constitutes a privilege escalation vector on the host system.
  • [CREDENTIALS_UNSAFE]: The skill checks for and accesses '~/.claude/feishu.json', a configuration file in a sensitive directory that typically stores API keys or integration tokens for the Feishu platform.
  • [EXTERNAL_DOWNLOADS]: The skill downloads the TeX Live installer from 'mirror.ctan.org' and various Python dependencies ('pdf2image', 'python-pptx', 'pymupdf') from public package registries. These downloads are performed from well-known and established technology services.
  • [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it ingests untrusted LaTeX data from user-provided files in the paper directory ($PAPER_DIR). This content is extracted and interpolated into generated LaTeX templates and Python scripts without sanitization or boundary markers. Ingestion points: 'paper/main.tex' and 'paper/sections/*.tex'. Boundary markers: Absent. Capability inventory: Bash, Write, Edit, and Python execution. Sanitization: Absent.
  • [REMOTE_CODE_EXECUTION]: The skill executes a remotely downloaded installer ('install-tl') and manages LaTeX packages via 'tlmgr', which involves executing code sourced from external repositories at runtime.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
May 6, 2026, 01:42 AM
Security Audit — agent-trust-hub — aris-paper-poster