office
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the download of official vendor components (@deepseek-ai/libreoffice-kit and platform-specific engines) via standard Node.js package managers when the local environment lacks the necessary Office conversion engine.
- [COMMAND_EXECUTION]: Instructions include running package manager installation commands (npm/pnpm) and executing the resulting CLI tools. The process is secured by a mandatory user authorization step and the use of the --ignore-scripts flag to prevent the execution of arbitrary post-install scripts.
- [INDIRECT_PROMPT_INJECTION]: As the skill is designed to process untrusted Office documents (Word, Excel, PowerPoint), it has an inherent surface for indirect prompt injection. This risk is mitigated by the skill's restricted execution context and the requirement for human-in-the-loop approval before installing the external engine required for processing.
- [DYNAMIC_EXECUTION]: The skill invokes a downloaded Node.js CLI tool (dsoffice or lib/cli.js) at runtime to perform document conversion and inspection tasks. This execution is limited to vendor-provided binaries and requires explicit user permission to proceed.
Audit Metadata