docx
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill securely invokes system utilities such as
soffice(LibreOffice) for document validation andgitfor performing word-level comparisons in the redlining workflow. These subprocess calls are implemented using argument lists to prevent shell injection vulnerabilities.\n- [EXTERNAL_DOWNLOADS]: Documentation instructs users to install well-known and reputable document processing utilities like Pandoc and LibreOffice from official system package managers.\n- [SAFE]: All XML manipulation within the core library uses thedefusedxmlpackage, effectively mitigating risks associated with untrusted XML data, such as XML External Entity (XXE) attacks.
Audit Metadata