skills/brycewang-stanford/awesome-agent-skills-for-empirical-research/latex-document/Gen Agent Trust Hub
latex-document
Warn
Audited by Gen Agent Trust Hub on Apr 25, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
compile_latex.shscript is documented to automatically install system-level dependencies such astexliveandpoppler-utilsif they are not present, which involves executing package manager commands and potentially requires elevated privileges.\n- [COMMAND_EXECUTION]: The skill makes extensive use of bash scripts to wrap complex command-line utilities likepandoc,qpdf,latexmk, andpdftoppmfor document processing and conversion.\n- [COMMAND_EXECUTION]: The skill performs dynamic code execution by compiling user-provided or generated LaTeX code using engines such aspdflatex,xelatex, andlualatex.\n- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection. Ingestion points: Reads content from external PDFs, scanned images, CSV, and JSON data sources. Boundary markers: None explicitly documented. Capability inventory: Includes command execution, file system access, and network requests. Sanitization: No evidence of input validation or sanitization before processing external data or using it in Jinja2 templates viamail_merge.py.\n- [EXTERNAL_DOWNLOADS]: Thefetch_bibtex.shscript performs network operations todoi.orgto retrieve bibliography metadata. This is a well-known academic service.
Audit Metadata