convert-docx
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external .docx files to generate content for LLM context.
- Ingestion points: Input file path provided in the first argument ($1).
- Boundary markers: Absent. The skill does not instruct the agent to wrap the output in delimiters or warn about potential instructions within the document.
- Capability inventory: The skill has access to Bash, Read, Write, and other skills, providing a significant capability surface if an injection is successful.
- Sanitization: No sanitization or filtering of the document content is performed before it is presented to the LLM.- [COMMAND_EXECUTION]: The skill executes shell commands to perform the conversion.
- Evidence: Uses python -m markitdown to process files within a bash environment.- [EXTERNAL_DOWNLOADS]: The skill ensures the installation of the markitdown package.
- Evidence: Step 1 calls toolsmith:install-dependency for markitdown.
Audit Metadata