docx-contracts
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions mention installing the
docxtplpackage from the standard Python package registry using pip. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied Word document templates, creating a surface for indirect prompt injection.
- Ingestion points: User-provided
.docxfiles are processed by the tool viascripts/extract_schema.pyandscripts/fill_template.py. - Boundary markers: The instructions lack explicit delimitation or warnings to the agent to ignore potential instructions embedded within the Word document content.
- Capability inventory: The skill facilitates file system operations and uses a template engine to generate documents based on user input.
- Sanitization: There is no verification or sanitization of the contents of the template files before they are processed by the underlying library.
- [DYNAMIC_EXECUTION]: The skill utilizes the
docxtpllibrary, which employs the Jinja2 engine to dynamically render template logic and variables within Word documents.
Audit Metadata