doc-format
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes external shell commands to facilitate the conversion of legacy document formats (.doc, .wps) into the modern .docx format.
- Evidence: The
SofficeConverter.convert_to_docxmethod inscripts/wfp_core.pyusessubprocess.runto call the LibreOfficesofficebinary. The execution is limited to a specific headless conversion command with controlled arguments. - [DYNAMIC_EXECUTION]: The skill employs dynamic module loading within its testing infrastructure to discover and run unit tests.
- Evidence: In
scripts/wfp_tests.py, themainfunction uses__import__(__name__)to load the current module into theunittestloader. This is a standard Python pattern for self-contained test scripts. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user-provided document files, which establishes a surface for indirect prompt injection if the agent interprets content from these files as instructions.
- Ingestion points:
WordProcessor.format_documentinscripts/wfp_core.pyreads content from various document formats (.docx, .txt, .md). - Boundary markers: The skill does not implement specific delimiters or warnings to isolate processed document content from the agent's instruction context.
- Capability inventory: The skill has the ability to write to the file system to save documents and execute the LibreOffice binary for format conversion.
- Sanitization: The skill performs filename sanitization using
RE_SAFE_FILENAME_CHARSand strips Markdown metadata through_clean_markdownto normalize input data.
Audit Metadata