pandoc-pdf-generation

Pass

Audited by Gen Agent Trust Hub on Apr 2, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides Bash scripts and instructions for executing system utilities to handle document conversion.
  • The assets/build-pdf.sh and assets/build-pdf-example.sh scripts use pandoc and xelatex for PDF generation.
  • The scripts include robust error handling (set -euo pipefail) and argument quoting to prevent common shell injection vulnerabilities.
  • Documentation in SKILL.md includes instructions for using the lpr command to print documents, accompanied by explicit warnings to obtain user approval first.
  • [SAFE]: The skill implements security and operational best practices throughout its design.
  • Scripts use local file paths and environment variables relevant to the agent's environment.
  • No hardcoded credentials, network exfiltration patterns, or obfuscated code were detected.
  • The skill focuses on canonical implementations and automated verification, reducing the likelihood of accidental misconfiguration.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 2, 2026, 08:36 PM