latex-scaffold

PassAudited by VirusTotal on May 6, 2026.

Overview

Type: OpenClaw Skill Name: latex-scaffold Version: 1.0.0 The skill provides legitimate utility for organizing LaTeX projects, including modularizing files and generating figure templates. The Python script 'scripts/generate_tex_for_assets.py' performs standard file operations on local image assets, and the external URL provided in 'SKILL.md' (ras.papercept.net) is a known legitimate resource for IEEE conference templates.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence

ASI04: Agentic Supply Chain Vulnerabilities

What this means

If the user chooses to download the template, they are trusting an external archive as the starting point for their LaTeX project.

Why it was flagged

The skill recommends an external template archive. This is optional and purpose-aligned, but the artifacts do not provide a checksum or verification guidance for that download.

Skill content

If user has no LaTeX project, download the default IEEE conference template:  `https://ras.papercept.net/conferences/support/files/ieeeconf.zip`

Recommendation

Download templates only from trusted sources, review the extracted files before use, and prefer an official template source when possible.

NoteHigh Confidence

ASI02: Tool Misuse and Exploitation

What this means

Running the helper will add generated LaTeX snippet files next to matching .png or .jpg assets in the chosen project.

Why it was flagged

The helper script creates .tex files for image assets. It is scoped to the provided project root's assets directory and avoids overwriting existing .tex files.

Skill content

dst = src.with_suffix(".tex")
    if dst.exists(): return
    ...
    dst.write_text(code)

Recommendation

Run the script only on the intended LaTeX project root and review generated files before committing or publishing them.