opendocswork-mcp-office-processing
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection.
- Ingestion points: Tools such as 'office_read' and 'get_document_info' ingest data from external Excel, Word, PowerPoint, and PDF files.
- Boundary markers: The documentation does not provide instructions for delimiters or warnings to ignore commands embedded within document content.
- Capability inventory: The skill possesses significant filesystem write capabilities across Excel, Word, PowerPoint, and PDF formats (e.g., 'office_write_cell', 'office_write_docx_from_md', 'office_fill_pdf_form').
- Sanitization: There is no evidence of sanitization or filtering of the text extracted from documents before it is passed to the agent.
- [EXTERNAL_DOWNLOADS]: The skill instructions require the user to download and install a binary from an external GitHub repository ('github.com/Aimino-Tech/office-oxide-mcp') using 'cargo install' or manual compilation.
- [DATA_EXFILTRATION]: The tools provide the agent with the ability to read arbitrary file contents and metadata from the local filesystem through user-specified paths, which could be misused to access sensitive user data.
Audit Metadata