paper-compilation
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONPRIVILEGE_ESCALATION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/compile_paper.pyusessubprocess.runto execute LaTeX compilation tools includingpdflatex,bibtex, andchktex. These commands are invoked using list-based arguments which mitigates shell injection risks. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user-provided LaTeX files (
.tex) and log files (.log) to identify and suggest fixes for compilation errors. This presents a potential surface for indirect injection where a malicious document could contain instructions for the agent; however, the skill's operation is restricted to document processing and lacks high-privilege capabilities. - [PRIVILEGE_ESCALATION]: Documentation in
SKILL.mdsuggests usingsudo apt installto install system-level LaTeX dependencies on Linux. This is presented as standard troubleshooting advice for environment setup rather than an automated script execution.
Audit Metadata