docx
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions and code examples utilize standard document processing libraries. No evidence of malicious behavior, data exfiltration, or unauthorized command execution was found.
- [PROMPT_INJECTION]: The skill processes data from external documents, which constitutes a potential surface for indirect prompt injection. This is an inherent property of document-processing tasks.
- Ingestion points: Document content ingestion via docx.Document and mammoth.convert_to_html as described in SKILL.md.
- Boundary markers: Not used; content is handled as raw text strings.
- Capability inventory: Local file system read and write operations.
- Sanitization: Content is extracted and processed without structural validation or sanitization.
Audit Metadata