docx

Pass

Audited by Gen Agent Trust Hub on Aug 11, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill securely invokes system utilities such as soffice (LibreOffice) for document validation and git for performing word-level comparisons in the redlining workflow. These subprocess calls are implemented using argument lists to prevent shell injection vulnerabilities.\n- [EXTERNAL_DOWNLOADS]: Documentation instructs users to install well-known and reputable document processing utilities like Pandoc and LibreOffice from official system package managers.\n- [SAFE]: All XML manipulation within the core library uses the defusedxml package, effectively mitigating risks associated with untrusted XML data, such as XML External Entity (XXE) attacks.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 11, 2026, 05:53 PM
Security Audit — agent-trust-hub — docx