typst

Pass

Audited by Gen Agent Trust Hub on May 18, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses Python's subprocess module to interact with the local typst CLI. Specifically, scripts/search-packages.py executes typst --version for compatibility checks, and scripts/validate-examples.py executes typst compile to ensure documentation snippets are valid. This is the primary and expected function of the skill.
  • [EXTERNAL_DOWNLOADS]: The skill references standard industry tools as dependencies, including the typst CLI, pdftotext, and jq. It also requires the markdown-it-py Python package for its validation script. No non-standard or suspicious third-party sources are utilized.
  • [DATA_EXFILTRATION]: Analysis of the Python scripts and agent instruction files shows no evidence of unauthorized network connections or attempts to access sensitive system files (e.g., SSH keys or environment secrets).
Audit Metadata
Risk Level
SAFE
Analyzed
May 18, 2026, 10:02 PM