doc-reader
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
web_fetcher.pyandscripts/instructions.mdto download content from external URLs and PDF files for translation purposes. It also downloads images referenced in documents to provide a complete local preview. These operations are core to the skill's stated purpose. - [COMMAND_EXECUTION]: The skill executes shell commands via
subprocess.run()inscripts/generate_slides.pyto invoke thecodexCLI. This is used for generating AI slides based on document metadata. It also usescpandchmodto manage script execution within the output directory. These commands are localized to the user's workspace and intended for processing the documents. - [DYNAMIC_EXECUTION]: The
scripts/build.pyscript dynamically generates apreview.htmlfile by embedding Markdown content and Base64-encoded images. The resulting HTML includes a remote dependency (https://cdn.jsdelivr.net/npm/marked/marked.min.js) for rendering Markdown in the browser, which is a common and legitimate practice for static site generation.
Audit Metadata