latex-thesis-zh
Pass
Audited by Gen Agent Trust Hub on Apr 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard LaTeX tools, including
latexmk,xelatex,lualatex, andchktex, via Python scripts (compile.py,check_format.py). These operations are implemented usingsubprocess.runwith list-based arguments, ensuring safe command execution without shell injection risks. - [EXTERNAL_DOWNLOADS]: For bibliography verification, the skill connects to the official APIs of CrossRef and Semantic Scholar. These are well-known academic services used specifically to validate publication metadata. The network activity is documented and appropriate for the skill's academic purpose.
- [DATA_EXPOSURE & EXFILTRATION]: No unauthorized data access or exfiltration patterns were detected. Network operations are strictly limited to the aforementioned reputable academic APIs for metadata lookups.
- [PROMPT_INJECTION]: The skill contains no instructions aimed at bypassing safety filters or overriding agent behavior. It defines clear safety boundaries for maintaining document and citation integrity.
Audit Metadata