office-word

Pass

Audited by Gen Agent Trust Hub on Jul 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides utility scripts for document format conversion as described. No malicious behavior was detected.
  • [EXTERNAL_DOWNLOADS]: Uses the python-docx library, which is a well-known package from the Python Package Index (PyPI).
  • [PROMPT_INJECTION]: The skill processes content from .docx files, which presents an indirect prompt injection surface. This allows external document content to enter the agent's context.
  • Ingestion points: scripts/read_docx.py reads content from file paths provided by the user.
  • Boundary markers: Absent; content is converted to Markdown and returned directly.
  • Capability inventory: The agent has capabilities to read/write files and execute shell commands.
  • Sanitization: No content filtering is applied to the extracted text.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 15, 2026, 02:29 PM
Security Audit — agent-trust-hub — office-word