docx-footnotes

Pass

Audited by Gen Agent Trust Hub on Apr 13, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: Static and manual analysis did not reveal any malicious patterns. The skill performs localized file modifications on .docx files as described in its documentation.
  • [COMMAND_EXECUTION]: The script scripts/fix_gdocs_footnotes.py utilizes subprocess.run to execute another local script, scripts/create_crossrefs.py. This is a controlled internal call to link the footnote repair and cross-reference conversion tasks using the current Python interpreter.
  • [EXTERNAL_DOWNLOADS]: The skill's documentation recommends the installation of the lxml and defusedxml packages via the pixi package manager. These are standard, well-maintained libraries for XML processing and do not represent a security risk in this context.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 13, 2026, 11:01 PM