arxiv-paper-writer
Pass
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches paper metadata and BibTeX entries from well-known academic services including arXiv.org and api.crossref.org. These operations are essential for citation verification and do not involve untrusted code execution or exfiltration risk.
- [COMMAND_EXECUTION]: The skill uses
subprocess.runto invoke standard LaTeX tools (pdflatex, bibtex, latexmk) and internal Python scripts for project management. These commands are executed using list-based arguments without invoking a shell, which follows security best practices. - [SAFE]: No evidence of prompt injection, credential exposure, obfuscation, or persistence mechanisms was found. Project data is managed locally using standard project files and a local SQLite database for metadata caching.
Audit Metadata