minimax-docx
Fail
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPERSISTENCEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The 'setup.sh' and 'env_check.sh' scripts fetch the official .NET SDK installation script from Microsoft's 'dot.net' domain.
- [REMOTE_CODE_EXECUTION]: The 'dotnet-install.sh' script is downloaded and executed during the installation process to set up the necessary runtime environment.
- [COMMAND_EXECUTION]: The skill uses the 'dotnet' CLI to build projects and execute document manipulation tools, including running custom logic generated by the agent.
- [PERSISTENCE]: The setup script appends configuration to the user's '~/.bashrc' (or equivalent) to add the .NET binary directory to the 'PATH' environment variable, ensuring the toolchain persists across terminal sessions.
- [DYNAMIC_EXECUTION]: The skill instructs the agent to write and execute custom C# scripts ('task.csx') using the OpenXML SDK for complex document operations that exceed standard CLI functionality.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests content from existing DOCX files provided by users or external sources. It lacks explicit instructions or boundary markers to differentiate between document data and agent commands, which presents a surface for indirect injection attacks. Ingestion points: 'AnalyzeCommand.cs', 'EditContentCommand.cs', 'ApplyTemplateCommand.cs'. Boundary markers: Absent. Capability inventory: Subprocess execution via 'dotnet run' and file modification via 'doc.Save()'. Sanitization: Not present for document text content.
Recommendations
- HIGH: Downloads and executes remote code from: https://dot.net/v1/dotnet-install.sh - DO NOT USE without thorough review
Audit Metadata