docx-render
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes multiple local Python scripts such as
doc_render.pyanddocx_repair.pyto process documents. It also interacts with system utilities includingdockerfor container management andsshfor remote guest access. - [REMOTE_CODE_EXECUTION]: The skill is designed to facilitate command execution on a remote Windows guest over SSH via the
word-remoterenderer. It manages the lifecycle of these remote environments usingdocker-composeand specialized shell scripts. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted document formats (e.g.,
.docx,.doc,.xlsx,.pptx) which serve as an attack surface for vulnerabilities in the underlying rendering engines like Microsoft Word or LibreOffice. - Ingestion points: The skill ingests external document files provided by the user for conversion.
- Boundary markers: No specific boundary markers or instructions to ignore embedded instructions are implemented for the document content.
- Capability inventory: The skill utilizes subprocess execution for local scripts, Docker management, and SSH-based remote rendering.
- Sanitization: The skill includes a
docx_repair.pyscript specifically designed to mitigate OOXML package corruption commonly found in Google Docs exports.
Audit Metadata