Compile LaTex & Typst into PDF with TypeTex

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: typetex Version: 1.5.0 The skill bundle is designed to compile Typst and LaTeX documents to PDF by sending source code to an external API endpoint: `https://studio-intrinsic--typetex-compile-app.modal.run`. All files, including `SKILL.md` and example Python scripts, consistently demonstrate this intended functionality without any evidence of malicious intent. There are no instructions for prompt injection against the agent, no attempts to exfiltrate local data or credentials, and no unauthorized execution of commands or network calls. The behavior is clearly aligned with its stated purpose.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If a document contains confidential text, images, or metadata, that content may be visible to the remote compilation service.

Why it was flagged

The core workflow sends user document source and optional files to a public external API. This is disclosed and purpose-aligned, but the artifacts do not describe privacy, retention, or provider-side handling.

Skill content
Public API for compiling Typst and LaTeX documents to PDF.
No authentication required.
...
content:
  description: Main LaTeX source code content
Recommendation

Only compile documents you are comfortable sending to this provider, or verify the provider's privacy and retention practices before using it for sensitive material.

What this means

Users have less information for confirming who operates the service or reviewing its implementation.

Why it was flagged

The skill relies on a remote service, but the registry metadata does not provide a source repository or homepage for independent provenance review.

Skill content
Source: unknown
Homepage: none
Recommendation

Prefer using this with non-sensitive documents unless you can independently verify the TypeTex service and trust its operator.