lovstudio-fill-form

Pass

Audited by Gen Agent Trust Hub on May 7, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [SAFE]: The skill performs legitimate office automation tasks without any detected security risks. It does not access sensitive credentials, perform unauthorized network communication, or exhibit obfuscation techniques.- [COMMAND_EXECUTION]: The script invokes system utilities like textutil or libreoffice to convert legacy .doc files into the modern .docx format. These operations are implemented securely using subprocess.run with explicit argument lists, which effectively prevents shell command injection vulnerabilities.- [EXTERNAL_DOWNLOADS]: The skill requires the 'python-docx' library, a well-known and reputable package for Word document manipulation, which is installed from the official Python Package Index (PyPI).
Audit Metadata
Risk Level
SAFE
Analyzed
May 7, 2026, 09:43 AM