chart-style-unifier
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill automatically fetches and installs the
python-docxandpywin32libraries from official package registries (such as PyPI or well-known mirrors) if they are not already present in the environment.\n- [COMMAND_EXECUTION]: Utilizessubprocess.runto executepip installcommands for runtime dependency management. While the packages are well-known, the use of shell commands for dynamic installation is a notable capability.\n- [INDIRECT_PROMPT_INJECTION]: A potential vulnerability surface exists because the skill ingest and processes the contents of external Word documents, which could contain malicious instructions designed to be interpreted by the AI agent.\n - Ingestion points:
scripts/change_table_font.pyopens and reads.docxfiles specified by thetarget_doc_pathconfiguration field.\n - Boundary markers: No explicit delimiters or instructions to ignore instructions embedded within document content are present.\n
- Capability inventory: The skill possesses significant capabilities including shell command execution (
subprocess), file system writes (docx.save), and full Office COM automation (win32com.client.Dispatch).\n - Sanitization: The skill performs basic validation of file existence and extensions but does not sanitize or filter the actual content of the document paragraphs and runs before processing.
Audit Metadata