skills/razbakov/skills/latex-pdf/Gen Agent Trust Hub

latex-pdf

Pass

Audited by Gen Agent Trust Hub on Aug 18, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses subprocess.run to invoke the Tectonic compiler. It passes arguments as a list rather than a string through a shell, which is a secure implementation pattern that prevents command injection.- [INDIRECT_PROMPT_INJECTION]: The skill provides an esc() helper function specifically designed to sanitize data before it is interpolated into LaTeX templates. This practice mitigates the risk of malicious input manipulating the LaTeX compilation process.- [EXTERNAL_DOWNLOADS]: The documentation references the installation of the Tectonic compiler via standard package managers. Tectonic's feature of downloading LaTeX packages automatically is documented as its standard operational behavior and targets official repositories.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 18, 2026, 01:50 AM
Security Audit — agent-trust-hub — latex-pdf