Is evan715823/cheatsheet-generator-skill safe?
Yes. evan715823/cheatsheet-generator-skill is safe to install. Oathe's behavioral security audit gave the cheatsheet-generator-skill skill by evan715823 a trust score of 90/100 with 4 findings, none critical or high.
https://github.com/evan715823/cheatsheet-generator-skill
Is evan715823/cheatsheet-generator-skill safe to install?
This is a legitimate educational tool for generating LaTeX cheatsheets from course materials. While it processes potentially untrusted file formats and executes code for PDF/PPTX processing and LaTeX compilation, these are necessary for its stated functionality and the implementation follows reasonable security practices.
What security issues were found in evan715823/cheatsheet-generator-skill?
Category Scores
Findings (4)
MEDIUM Dynamic Python execution for file processing -15 ▶
The skill executes Python code dynamically via bash commands to process PDF and PPTX files. While necessary for the functionality, this could potentially be exploited if malicious content is embedded in input files.
MEDIUM LaTeX compilation of user content -10 ▶
The skill compiles LaTeX content using external tools (latexmk) which could potentially execute arbitrary code if malicious LaTeX is generated or injected.
LOW File system access for course materials -10 ▶
The skill reads various file formats from the working directory including PDFs, PPTX, and images. Access is limited to the intended functionality.
LOW Local web server exposure -20 ▶
The skill starts local Flask web servers on random ports for configuration and editing. While using localhost binding, this creates additional attack surface.
Should I install evan715823/cheatsheet-generator-skill?
Oathe's verdict for evan715823/cheatsheet-generator-skill is SAFE with a trust score of 90/100. Recommendation: Install.