venue-templates
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/validate_format.pyuses the Pythonsubprocessmodule to callpdfinfoandpdffonts. These calls are implemented securely using argument lists rather than shell strings, preventing shell injection. The tools are used strictly for diagnostic purposes (checking page counts and font families). - [DATA_EXPOSURE]: Technical review of the templates and guides shows only benign placeholder data such as
[email protected]. No hardcoded credentials, API keys, or sensitive environmental data are present. - [PROMPT_INJECTION]: The skill instructions and documentation provide guidance on academic writing and formatting without attempting to override agent safety protocols or hijack system behavior.
- [REMOTE_CODE_EXECUTION]: All scripts included in the skill rely solely on the Python standard library and local system utilities (like pdflatex). There are no network-based downloads or execution of untrusted remote code.
Audit Metadata