latex-compile-qa
Pass
Audited by Gen Agent Trust Hub on Mar 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script executes the
latexmkcommand usingsubprocess.runto compile the LaTeX project. The execution is performed with-interaction=nonstopmodeand-halt-on-error, and it does not enable shell-escape, limiting the risk of malicious LaTeX commands affecting the host system. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it processes untrusted data which is subsequently reflected in a report read by the agent.
- Ingestion points: Reads
latex/main.texand the resultingmain.log(scripts/run.py). - Boundary markers: Absent; the compilation report does not use specific delimiters or warnings to isolate log content.
- Capability inventory: Subprocess execution of
latexmk, file system write access viashutil.copy2andatomic_write_text(scripts/run.py). - Sanitization: Absent; the tail of stdout, stderr, and log files are included directly in the markdown report without filtering or escaping.
Audit Metadata