typst
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses Python's
subprocessmodule to interact with the localtypstCLI. Specifically,scripts/search-packages.pyexecutestypst --versionfor compatibility checks, andscripts/validate-examples.pyexecutestypst compileto ensure documentation snippets are valid. This is the primary and expected function of the skill. - [EXTERNAL_DOWNLOADS]: The skill references standard industry tools as dependencies, including the
typstCLI,pdftotext, andjq. It also requires themarkdown-it-pyPython package for its validation script. No non-standard or suspicious third-party sources are utilized. - [DATA_EXFILTRATION]: Analysis of the Python scripts and agent instruction files shows no evidence of unauthorized network connections or attempts to access sensitive system files (e.g., SSH keys or environment secrets).
Audit Metadata