treatment-plans

Pass

Audited by Gen Agent Trust Hub on Apr 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the Bash tool to execute LaTeX compilation commands such as pdflatex and xelatex, and local Python scripts for document validation and template generation.
  • [EXTERNAL_DOWNLOADS]: The documentation describes using the TeX Live Manager (tlmgr) to download and install LaTeX packages from the Comprehensive TeX Archive Network (CTAN), which is the standard well-known repository for TeX resources.
  • [COMMAND_EXECUTION]: The reference guide provides troubleshooting steps that involve the use of sudo for installing system-wide LaTeX packages.
  • [PROMPT_INJECTION]: The skill defines a surface for indirect prompt injection by interpolating user-provided clinical data into LaTeX templates. 1. Ingestion points: Patient demographics and clinical scenarios processed via SKILL.md. 2. Boundary markers: Absent; no specific delimiters or instruction warnings are provided for the interpolation of external data. 3. Capability inventory: The agent has access to Write and Bash tools for file manipulation and command execution. 4. Sanitization: Absent; while HIPAA de-identification is mentioned, the instructions do not specify validation or escaping of LaTeX control sequences in user input.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 16, 2026, 08:27 AM