skripsi-filkom-ub
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
verify_sources.pyscript performs network requests to well-known DOI metadata registries, such as Crossref and DataCite, to validate citation information. These operations are restricted to metadata retrieval for academic verification and do not involve executable code downloads. - [COMMAND_EXECUTION]: The skill instructs the agent to execute local commands for LaTeX compilation and static analysis using standard tools like
latexmkandpython3. The instructions include explicit security warnings advising against the use of the--shell-escapeflag when processing untrusted TeX sources. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external LaTeX documents and bibliographic JSON data. It addresses potential injection risks by implementing non-hallucination principles, evidence-based writing requirements, and providing internal audit scripts that verify document structure and reference metadata without executing untrusted content.
Audit Metadata