scientific-slides

Pass

Audited by Gen Agent Trust Hub on Jun 26, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The Python scripts within the skill utilize subprocess.run to call system utilities such as pdflatex for Beamer compilation and to bridge internal script calls. These executions are performed using list-based arguments without the shell=True parameter, which prevents command injection risks.\n- [EXTERNAL_DOWNLOADS]: The skill connects to the OpenRouter API to generate slide visuals. OpenRouter is a recognized provider for LLM API access, and the integration is necessary for the skill's advertised functionality.\n- [CREDENTIALS_UNSAFE]: Secret management for the required OpenRouter API key is handled through standard environment variables and .env file loading. No hardcoded credentials were observed in the provided source code.\n- [DATA_EXFILTRATION]: Network traffic is restricted to the legitimate OpenRouter endpoint for the purpose of slide generation. There is no evidence of unauthorized data harvesting or transmission of sensitive local files.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 26, 2026, 07:58 PM