init-latex-project
Pass
Audited by Gen Agent Trust Hub on May 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill is a specialized utility designed for academic researchers to bootstrap paper projects. Its behavior is consistent with its stated purpose of project initialization and workflow management for LaTeX-based writing.
- [EXTERNAL_DOWNLOADS]: The
scripts/init.shscript downloads official LaTeX style files (.sty, .bst, .cls) from authoritative academic conference servers and well-known GitHub organizations (e.g.,media.icml.cc,media.nips.cc,github.com/acl-org,github.com/cvpr-org). These downloads are handled safely: the script fetches zip archives and extracts only specific LaTeX-related file types into the project directory without executing them as scripts. - [COMMAND_EXECUTION]: The initialization process is performed via a local shell script (
scripts/init.sh). The script uses standard system utilities (mkdir,cp,find,curl,unzip) for local file and directory management. It includes basic validation for input arguments (such as venue names) to prevent arbitrary behavior. - [SAFE]: The inclusion of
AGENTS.mdandCLAUDE.mdtemplates provides workflow guidance and writing style rules for AI agents participating in the paper-writing process. These instructions are benign, focusing on technical accuracy, LaTeX best practices, and project organization.
Audit Metadata