wps-thesis
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the 'python-docx' package via pip. This is a well-known, standard library for document manipulation and is considered a safe dependency.
- [COMMAND_EXECUTION]: The skill uses shell commands to install dependencies and is designed to execute Python scripts to generate the final .docx file. All operations are local and aligned with the skill's stated purpose.
- [PROMPT_INJECTION]: Indirect prompt injection surface identified.
- Ingestion points: The skill processes user-provided metadata (title, author, etc.) and potentially body content (draft.md) to populate the thesis document.
- Boundary markers: None identified in the provided templates.
- Capability inventory: The skill uses
Bash,Write, andEditto create and save the output document. - Sanitization: No explicit sanitization or input validation is performed on the user-supplied text before document generation.
Audit Metadata