data-act-ryan-malek

Pass

Audited by Gen Agent Trust Hub on Jun 26, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is designed for local legal analysis and drafting. It bundles verbatim source texts and processes them using predefined markdown templates. No network operations were detected that would exfiltrate data.
  • [COMMAND_EXECUTION]: The script scripts/render_docx.py utilizes subprocess.run() to invoke the pandoc document converter. This is a core part of the skill's document generation functionality. The implementation follows security best practices by passing arguments as a list rather than a shell string, effectively mitigating command injection risks.
  • [EXTERNAL_DOWNLOADS]: The documentation and installation scripts reference standard, well-known software dependencies such as pandoc and Python libraries (python-docx, pypdf) from official repositories (Homebrew, PyPI, and system package managers). These are verified dependencies required for the skill's primary function.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 26, 2026, 08:33 PM
Security Audit — agent-trust-hub — data-act-ryan-malek