paper-compilation

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONPRIVILEGE_ESCALATION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/compile_paper.py uses subprocess.run to execute LaTeX compilation tools including pdflatex, bibtex, and chktex. These commands are invoked using list-based arguments which mitigates shell injection risks.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user-provided LaTeX files (.tex) and log files (.log) to identify and suggest fixes for compilation errors. This presents a potential surface for indirect injection where a malicious document could contain instructions for the agent; however, the skill's operation is restricted to document processing and lacks high-privilege capabilities.
  • [PRIVILEGE_ESCALATION]: Documentation in SKILL.md suggests using sudo apt install to install system-level LaTeX dependencies on Linux. This is presented as standard troubleshooting advice for environment setup rather than an automated script execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 02:30 PM
Security Audit — agent-trust-hub — paper-compilation