complete-example
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes the
subprocess.runfunction to execute LaTeX compilers likexelatexand citation tools likebibtexto verify the generated document structure. These operations are restricted to specific, predefined commands and occur within the project's runtime environment.- [DATA_EXFILTRATION]: Snippets of user code, reference metadata, and document text are transmitted to LLM providers (Anthropic or OpenAI) for thematic analysis and narrative synthesis. This transmission is central to the skill's generative functionality.- [PROMPT_INJECTION]: The skill processes project-sourced data (source code, LaTeX, and BibTeX) which presents an indirect prompt injection surface. Maliciously crafted content in project files could theoretically influence AI-generated narratives, though the skill's output is sanitized and structurally validated by the integrated FormatGuard.- [DATA_EXPOSURE]: The skill scans and reads local project files including images, source code, and bibliographies to facilitate content generation. Path traversal protections are implemented in theskill_controller.pyandformat_guard.pymodules to ensure access is restricted to the target project directory.
Audit Metadata