data-act-ryan-malek
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed for local legal analysis and drafting. It bundles verbatim source texts and processes them using predefined markdown templates. No network operations were detected that would exfiltrate data.
- [COMMAND_EXECUTION]: The script
scripts/render_docx.pyutilizessubprocess.run()to invoke thepandocdocument converter. This is a core part of the skill's document generation functionality. The implementation follows security best practices by passing arguments as a list rather than a shell string, effectively mitigating command injection risks. - [EXTERNAL_DOWNLOADS]: The documentation and installation scripts reference standard, well-known software dependencies such as
pandocand Python libraries (python-docx,pypdf) from official repositories (Homebrew, PyPI, and system package managers). These are verified dependencies required for the skill's primary function.
Audit Metadata