office
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill relies on well-established and reputable open-source libraries for document processing, including openpyxl (Excel), python-docx (Word), python-pptx (PowerPoint), and pypdf (PDF).
- [SAFE]: System commands for document conversion and preview rendering (soffice, pdftoppm) are invoked using secure subprocess methods that pass arguments as lists, effectively mitigating shell injection risks.
- [SAFE]: The core logic enforces a 'render-and-inspect' quality gate, requiring the agent to generate and review PNG previews of every deliverable to ensure visual correctness and absence of placeholder text.
- [SAFE]: External dependencies and techniques are sourced from trusted vendors and well-known service providers, including Anthropic, OpenAI, and GitHub, with clear attributions provided in the NOTICE.md and SOURCES.yaml files.
- [SAFE]: The skill uses isolated LibreOffice profiles (via the UserInstallation flag) during headless execution to prevent profile conflicts and ensure consistent operation in automated environments.
Audit Metadata