editing-word-documents
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install standard, well-known libraries and tools for document processing, including 'python-docx', 'lxml', and 'docx' (NPM). These are legitimate industry-standard packages for the stated purpose.
- [COMMAND_EXECUTION]: The skill provides examples of using common CLI utilities such as 'pandoc' for document conversion, 'unzip' for inspecting Office Open XML structures, and 'libreoffice' for PDF conversion. These commands are used within the scope of document analysis and manipulation.
- [DATA_EXPOSURE]: The skill correctly demonstrates accessing document properties (author, title, creation date) and extracting text, which are core features of document processing. No patterns of sensitive file access (e.g., SSH keys, credentials) or unauthorized network exfiltration were detected.
- [INDIRECT_PROMPT_INJECTION]: While the skill involves processing external document data (ingesting .docx files), it provides structured methods for handling this data (e.g., using specific libraries like python-docx) which reduces the risk of the agent misinterpreting document content as instructions.
Audit Metadata