documents
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides instructions for professional document creation and editing using established libraries and tools.
- [SAFE]: A safety-first approach is mandated for dependency management, requiring the agent to seek user confirmation before package installation.
- [COMMAND_EXECUTION]: The skill uses tools like
unzipandpandocto interact with document files. These tools are used for their intended purpose (manipulating OOXML and file conversion) and do not pose a security risk. - [PROMPT_INJECTION]: The skill operates on external
.docxfiles, which constitutes a surface for indirect prompt injection. Ingestion point:SKILL.md(workflow for document editing). Boundary markers: Absent. Capability inventory: File system writes viapython-docxandunzip. Sanitization: Absent. The risk is considered low/safe due to the absence of network access or persistent system modification capabilities.
Audit Metadata