lovstudio-review-doc

Pass

Audited by Gen Agent Trust Hub on Jul 29, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of well-known and reputable Python libraries, specifically python-docx and lxml, which are standard tools for processing OpenXML documents.
  • [COMMAND_EXECUTION]: Included scripts contract_docx.py and annotate_docx.py provide local processing capabilities for document extraction and annotation. These scripts include logic to validate JSON schema and explicitly prevent overwriting original input files to ensure data integrity.
  • [DATA_EXFILTRATION]: Analysis of the provided Python source code confirms that no network operations (such as HTTP requests or socket connections) are performed. The skill processes sensitive legal data entirely within the local environment.
  • [SAFE]: The instructions for the agent emphasize a structured workflow that distinguishes between original document text, legal facts, and commercial judgments, which serves as a robust boundary to prevent confusion between untrusted input and agent reasoning.
  • [SAFE]: No obfuscation, prompt injection, or persistence mechanisms were detected in the skill's instructions or metadata.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 29, 2026, 02:53 PM
Security Audit — agent-trust-hub — lovstudio-review-doc