lovstudio-fill-form
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill performs legitimate office automation tasks without any detected security risks. It does not access sensitive credentials, perform unauthorized network communication, or exhibit obfuscation techniques.- [COMMAND_EXECUTION]: The script invokes system utilities like
textutilorlibreofficeto convert legacy.docfiles into the modern.docxformat. These operations are implemented securely usingsubprocess.runwith explicit argument lists, which effectively prevents shell command injection vulnerabilities.- [EXTERNAL_DOWNLOADS]: The skill requires the 'python-docx' library, a well-known and reputable package for Word document manipulation, which is installed from the official Python Package Index (PyPI).
Audit Metadata