typst-paper

Pass

Audited by Gen Agent Trust Hub on Apr 3, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the subprocess module within scripts/compile.py and scripts/check_pseudocode.py to invoke the typst CLI. These operations are essential for compiling documents, listing system fonts, and querying document metadata, and are implemented using secure coding practices without shell injection vulnerabilities.
  • [EXTERNAL_DOWNLOADS]: The scripts/online_bib_verify.py component performs network requests to api.crossref.org and api.semanticscholar.org. These are reputable academic services used to validate paper metadata and retrieve missing DOIs, which is a standard requirement for citation verification in academic writing.
  • [SAFE]: Extensive analysis across all files revealed no patterns of data exfiltration, credential harvesting, or persistence mechanisms. The skill is well-documented and its technical implementation is consistent with its stated goal of assisting with Typst-based research papers.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 3, 2026, 02:31 AM