doc
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script 'scripts/render_docx.py' executes the 'soffice' command (LibreOffice) to convert documents to PDF. This is performed securely using 'subprocess.run' with a list of arguments, which prevents shell injection risks.
- [EXTERNAL_DOWNLOADS]: The skill recommends installing well-known Python packages ('python-docx', 'pdf2image') and system utilities ('libreoffice', 'poppler-utils') from official repositories for its rendering functionality.
- [SAFE]: The skill's behavior is entirely consistent with its stated purpose of processing and reviewing Word documents. No patterns associated with data exfiltration, persistence, or malicious prompt injection were identified.
Audit Metadata