latex-scaffold

AdvisoryAudited by Static analysis on May 6, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI04: Agentic Supply Chain Vulnerabilities

What this means

If the user chooses to download the template, they are trusting an external archive as the starting point for their LaTeX project.

Why it was flagged

The skill recommends an external template archive. This is optional and purpose-aligned, but the artifacts do not provide a checksum or verification guidance for that download.

Skill content

If user has no LaTeX project, download the default IEEE conference template:  `https://ras.papercept.net/conferences/support/files/ieeeconf.zip`

Recommendation

Download templates only from trusted sources, review the extracted files before use, and prefer an official template source when possible.

Note

ASI02: Tool Misuse and Exploitation

What this means

Running the helper will add generated LaTeX snippet files next to matching .png or .jpg assets in the chosen project.

Why it was flagged

The helper script creates .tex files for image assets. It is scoped to the provided project root's assets directory and avoids overwriting existing .tex files.

Skill content

dst = src.with_suffix(".tex")
    if dst.exists(): return
    ...
    dst.write_text(code)

Recommendation

Run the script only on the intended LaTeX project root and review generated files before committing or publishing them.