latex-document
Warn
Audited by Socket on Apr 17, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The core LaTeX/PDF functionality is broadly aligned with the stated purpose, but the skill is unusually expansive, performs package auto-installs, invokes a separate sibling skill, and processes untrusted external content while preserving shell/file-write capability. No clear credential theft or exfiltration is evident, so this is not malicious, but the trust and prompt-injection surface are larger than a narrowly scoped document skill.
Confidence: 84%Severity: 63%
Audit Metadata