fill-protocol
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a headless LibreOffice instance via the
sofficecommand to convert legacy.doctemplates into the modern.docxformat. This process is executed locally usingsubprocess.runon user-specified file paths. - [EXTERNAL_DOWNLOADS]: The
setup.shscript facilitates the installation of necessary Python packages (python-docx,docxtpl,pyyaml) and the LibreOffice utility. These resources are fetched from well-known official sources, including the Python Package Index (PyPI) and system package managers such as Homebrew, APT, DNF, and Pacman. - [PRIVILEGE_ESCALATION]: On Linux distributions, the
setup.shscript usessudoto install system-level dependencies. This behavior is documented, occurs only with user confirmation, and is consistent with the skill's primary purpose of environment setup.
Audit Metadata