latex-compile-qa

Pass

Audited by Gen Agent Trust Hub on Mar 17, 2026

Risk Level: SAFECOMMAND_EXECUTION

Full Analysis

[COMMAND_EXECUTION]: The script uses subprocess.run to invoke LaTeX compilation tools including latexmk, xelatex, bibtex, and pdfinfo. These commands are executed using argument lists to prevent shell injection vulnerabilities.
[EXTERNAL_DOWNLOADS]: The script checks for the presence of local LaTeX binaries using shutil.which but does not perform any remote downloads or network requests at runtime.

Audit Metadata

Risk Level

SAFE

Analyzed

Mar 17, 2026, 01:48 AM