venue-templates

Pass

Audited by Gen Agent Trust Hub on Jun 21, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The scripts/generate_schematic_ai.py script performs network operations using the requests library to interact with the OpenRouter API (openrouter.ai). It sends user-provided descriptions to Google Gemini models to generate and review scientific schematics.
  • [COMMAND_EXECUTION]: The scripts/validate_format.py script utilizes subprocess.run to execute standard PDF utility commands pdfinfo and pdffonts. This functionality is used to verify document metadata, page counts, and font compliance with venue requirements.
  • [COMMAND_EXECUTION]: The scripts/generate_schematic.py script uses subprocess.run to invoke a local Python helper script (generate_schematic_ai.py), passing user arguments and API keys through environment variables.
  • [PROMPT_INJECTION]: The diagram generation utility in scripts/generate_schematic_ai.py interpolates user-provided text directly into an LLM prompt. While this creates a vulnerability surface for prompt injection, it is the primary intended mechanism of the tool's AI integration.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 21, 2026, 11:09 AM