office-oxide-mcp-server
Warn
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install an external binary using "cargo install office-oxide-mcp" or by cloning the repository at "github.com/Aimino-Tech/office-oxide-mcp". This source is not associated with the skill author's verified vendor patterns or the trusted vendors list, constituting an unverified third-party dependency.- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to the lack of security boundaries when processing document content.
- Ingestion points: Tools such as "office_read", "office_list_pdf_fields", and "office_analyze_pdf_layout" (SKILL.md) ingest data from local file paths provided by the user or an external source.
- Boundary markers: The skill does not implement delimiters or instructions for the agent to ignore embedded commands within the processed files.
- Capability inventory: The skill possesses powerful write capabilities, including "office_write_range", "office_write_docx_from_md", and "office_fill_pdf_form" (SKILL.md), which could be misused if the agent is manipulated by content from a malicious document.
- Sanitization: There is no evidence of sanitization or validation of extracted document content provided in the skill instructions.
Audit Metadata