paper-compile
Pass
Audited by Gen Agent Trust Hub on Apr 19, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it reads and evaluates content from external LaTeX source files and compilation logs. Ingestion points: Reads paper source files (.tex) and
compile.logduring error diagnosis and post-compilation checks. Boundary markers: Absent. The instructions do not specify how to handle instructions found within the LaTeX source. Capability inventory: Possesses full shell access (Bash(*)) and file system modification capabilities (Write,Edit). Sanitization: Absent. Content from logs and source files is directly analyzed to apply fixes. - [EXTERNAL_DOWNLOADS]: The skill suggests using
tlmgr,apt-get, andbrewto install LaTeX dependencies and system packages. These are official and well-known tools for environment management and do not represent a security risk when used as intended. - [COMMAND_EXECUTION]: The skill utilizes command-line utilities including
latexmk,pdflatex, andpdftotextto perform compilation and document analysis tasks. It also executes a hardcoded Python script to process page counts, which is a standard procedure for this task.
Audit Metadata