docx

Pass

Audited by Gen Agent Trust Hub on Jul 10, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns, prompt injections, or data exfiltration techniques were detected. The skill follows secure coding practices by using hardened XML parsers to handle untrusted document content.
  • [COMMAND_EXECUTION]: The Python scripts utilize subprocess.run to execute standard utilities such as soffice (LibreOffice) and git. These operations are limited to the local file system and are used for document validation, conversion, and comparison (redlining) as described in the skill's primary functionality.
  • [EXTERNAL_DOWNLOADS]: The documentation references several well-known and trusted external software packages, including pandoc, libreoffice, and the docx NPM library, as required dependencies for document processing workflows.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 10, 2026, 10:55 AM
Security Audit — agent-trust-hub — docx