typst-paper
Pass
Audited by Gen Agent Trust Hub on Mar 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches bibliography metadata from established academic services, including CrossRef (api.crossref.org) and Semantic Scholar (api.semanticscholar.org). These requests are used solely for the intended purpose of verifying citation accuracy and retrieving verified metadata.
- [COMMAND_EXECUTION]: The skill uses the official typst CLI for document compilation and metadata queries. It also utilizes the uv tool to execute local Python scripts that perform various analysis and optimization tasks on Typst project files, such as grammar checks and bibliography validation.
- [SAFE]: The skill follows secure coding practices, such as using yaml.safe_load for parsing external YAML data and employing strictly defined regular expressions for prose analysis. It explicitly defines safety boundaries to protect sensitive document elements like citations, math blocks, and labels from unintended modification.
Audit Metadata