venue-templates
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
scripts/generate_schematic_ai.pyscript performs network operations using therequestslibrary to interact with the OpenRouter API (openrouter.ai). It sends user-provided descriptions to Google Gemini models to generate and review scientific schematics. - [COMMAND_EXECUTION]: The
scripts/validate_format.pyscript utilizessubprocess.runto execute standard PDF utility commandspdfinfoandpdffonts. This functionality is used to verify document metadata, page counts, and font compliance with venue requirements. - [COMMAND_EXECUTION]: The
scripts/generate_schematic.pyscript usessubprocess.runto invoke a local Python helper script (generate_schematic_ai.py), passing user arguments and API keys through environment variables. - [PROMPT_INJECTION]: The diagram generation utility in
scripts/generate_schematic_ai.pyinterpolates user-provided text directly into an LLM prompt. While this creates a vulnerability surface for prompt injection, it is the primary intended mechanism of the tool's AI integration.
Audit Metadata