venue-templates

Pass

Audited by Gen Agent Trust Hub on Jun 26, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/validate_format.py uses the Python subprocess module to call pdfinfo and pdffonts. These calls are implemented securely using argument lists rather than shell strings, preventing shell injection. The tools are used strictly for diagnostic purposes (checking page counts and font families).
  • [DATA_EXPOSURE]: Technical review of the templates and guides shows only benign placeholder data such as [email protected]. No hardcoded credentials, API keys, or sensitive environmental data are present.
  • [PROMPT_INJECTION]: The skill instructions and documentation provide guidance on academic writing and formatting without attempting to override agent safety protocols or hijack system behavior.
  • [REMOTE_CODE_EXECUTION]: All scripts included in the skill rely solely on the Python standard library and local system utilities (like pdflatex). There are no network-based downloads or execution of untrusted remote code.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 26, 2026, 07:58 PM