skills/openhands/skills/pdflatex/Gen Agent Trust Hub

pdflatex

Warn

Audited by Gen Agent Trust Hub on Feb 19, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • Privilege Escalation (MEDIUM): The skill provides 'apt-get install' commands for software installation. These operations typically require root/sudo access and modify system-wide directories, posing a risk of unauthorized system configuration if executed by an agent.
  • Dynamic Execution (LOW): The skill utilizes 'pdflatex' to compile document source code. LaTeX is a powerful macro language capable of complex logic and file system interaction; while central to the skill's purpose, it represents a dynamic execution risk.
  • Indirect Prompt Injection (LOW): The skill processes untrusted '.tex' source files which can contain malicious commands.
  • Ingestion points: latex_source_name.tex (referenced in SKILL.md)
  • Boundary markers: None present.
  • Capability inventory: System package installation and file processing via 'pdflatex'.
  • Sanitization: None present.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 19, 2026, 05:40 PM