docx-contracts

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructions mention installing the docxtpl package from the standard Python package registry using pip.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied Word document templates, creating a surface for indirect prompt injection.
  • Ingestion points: User-provided .docx files are processed by the tool via scripts/extract_schema.py and scripts/fill_template.py.
  • Boundary markers: The instructions lack explicit delimitation or warnings to the agent to ignore potential instructions embedded within the Word document content.
  • Capability inventory: The skill facilitates file system operations and uses a template engine to generate documents based on user input.
  • Sanitization: There is no verification or sanitization of the contents of the template files before they are processed by the underlying library.
  • [DYNAMIC_EXECUTION]: The skill utilizes the docxtpl library, which employs the Jinja2 engine to dynamically render template logic and variables within Word documents.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 04:20 PM