office-to-pdf
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill instructions and metadata do not contain any malicious patterns. The use of standard system package managers for installation is considered safe behavior.
- [COMMAND_EXECUTION]: The skill provides patterns for executing the
libreofficebinary in headless mode to perform document conversions, which is the primary and legitimate purpose of the skill. - [INDIRECT_PROMPT_INJECTION]: The skill processes external document files as input, which constitutes a potential attack surface. 1. Ingestion points: Office documents (.docx, .pptx, .xlsx, etc.) referenced in conversion commands. 2. Boundary markers: None present. 3. Capability inventory: Functionality is limited to document format conversion via the system's LibreOffice installation. 4. Sanitization: The skill does not perform additional sanitization, relying on the underlying security of the LibreOffice parser.
Audit Metadata