docx
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses the 'defusedxml' library for XML parsing, which is a security best practice to prevent XML External Entity (XXE) vulnerabilities when handling untrusted document content.
- [SAFE]: All command execution (e.g., using LibreOffice, Pandoc, and Git) is performed locally with arguments derived from the skill's logic or local file paths, minimizing risk of shell injection from untrusted sources.
- [SAFE]: No evidence of data exfiltration, hardcoded credentials, or unauthorized network operations was found. Dependencies are restricted to standard, well-known packages.
- [SAFE]: The skill includes comprehensive validation steps to ensure document integrity before and after modifications.
Audit Metadata