latex-pdf
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runto invoke the Tectonic compiler. It passes arguments as a list rather than a string through a shell, which is a secure implementation pattern that prevents command injection.- [INDIRECT_PROMPT_INJECTION]: The skill provides anesc()helper function specifically designed to sanitize data before it is interpolated into LaTeX templates. This practice mitigates the risk of malicious input manipulating the LaTeX compilation process.- [EXTERNAL_DOWNLOADS]: The documentation references the installation of the Tectonic compiler via standard package managers. Tectonic's feature of downloading LaTeX packages automatically is documented as its standard operational behavior and targets official repositories.
Audit Metadata