pandoc-pdf-generation

Pass

Audited by Gen Agent Trust Hub on Oct 13, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill relies on system commands and shell scripts to automate the document conversion process. It uses pandoc and xelatex for PDF generation, and provides a universal build script (build-pdf.sh) that performs pre-flight checks and manages the conversion workflow. It also includes instructions for interacting with system printers using lpr and lpstat.
  • [EXTERNAL_DOWNLOADS]: The documentation references well-known and trusted academic resources, such as the Zotero Style Repository and the Citation Styles Project, for obtaining citation style (CSL) files. It also recommends using standard package managers like Homebrew (brew) for installing required system dependencies like MacTeX and fonts.
  • [PRIVILEGE_ESCALATION]: The troubleshooting guides include instructions for the user to manually run sudo tlmgr install to resolve missing LaTeX package dependencies. While this involves elevated privileges, it is presented as a standard administrative task for TeX Live management and is not automated within the skill's scripts.
  • [DYNAMIC_EXECUTION]: The skill uses a custom Pandoc Lua filter (hide-details-for-pdf.lua) to programmatically strip specific HTML elements from the document during conversion. This is a legitimate use of Pandoc's extension architecture to customize output behavior.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external Markdown files. As a document generation tool, it has the surface area to ingest untrusted content that might contain instructions meant to influence an agent during the build or review process. However, the transformation into a static PDF format limits the direct exploitability of such content.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 13, 2026, 05:57 AM