Generate professional LaTeX documents from templates. Supports academic papers (IEEE/ACM), Chinese thesis (CTeX), CVs (moderncv), and custom templates. Auto-...

Things to consider before installing or running this skill: - Metadata mismatch: The skill metadata lists no required binaries but the code requires a TeX engine (xelatex). Ensure you have TeX Live or MiKTeX installed before using it. - Incomplete / inconsistent code: The provided source shows problems (a truncated section in latex_generator.py and cross-file references that likely will raise ImportError or NameError, e.g., body_builder.py imports a module-level escape_latex that doesn't exist). Treat the bundle as potentially non-functional until you or the author fixes these issues. - LaTeX compilation is a potential execution surface: TeX can execute external commands via mechanisms like \write18 if shell-escape is enabled. The build invocation does not explicitly enable shell-escape (which is good), but if your TeX installation is configured to allow it, compiling untrusted LaTeX could execute commands. Only compile LaTeX from trusted sources, or run the builder in a restricted/sandboxed environment (container, VM, or isolated user account) when handling untrusted input. - Templates directory: TemplateManager expects a templates/ directory relative to the skill. If the templates are not bundled, template lookups will fail. Verify that required template files are present and review any custom .cls files before using them. - Run in a sandbox first: Because of the code issues and the LaTeX execution surface, test the skill in a disposable environment (container/VM) and review templates and the full latex output source before compiling PDFs for untrusted content. If you want, I can: (a) point out the exact lines where imports will fail or where truncation occurs, (b) propose fixes for the broken references, or (c) generate a safe checklist for sandboxing LaTeX compilation on your system.

Type: OpenClaw Skill Name: latex-writer Version: 1.0.0 The skill facilitates LaTeX document generation and PDF compilation by executing the 'xelatex' system binary via 'asyncio.create_subprocess_exec' in 'scripts/pdf_builder.py'. While the 'scripts/latex_generator.py' file includes an 'escape_latex' function to sanitize user input, the execution of a complex typesetting engine on dynamically generated content constitutes a high-risk capability due to the potential for LaTeX injection attacks. No evidence of intentional malice, such as data exfiltration or backdoors, was found, and the behavior aligns with the stated purpose.