doc
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/render_docx.pyand instructions inSKILL.mduse system commands (soffice,pdftoppm) for document conversion and rendering. These calls are handled securely using argument lists in the Pythonsubprocessmodule, which mitigates shell injection risks. - [EXTERNAL_DOWNLOADS]: The skill documentation includes instructions to install necessary system utilities (
libreoffice,poppler) and Python libraries (python-docx,pdf2image) required for its functionality. These are well-known, legitimate tools for the task.
Audit Metadata