template-based-document-generation
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- XML Processing Security: The document generation engine includes mitigations against potential XML-related considerations. It enforces nesting depth limits and restricts the use of certain XML declarations (such as DTDs and entities) to ensure safe processing of OOXML data, protecting against potential XML External Entity (XXE) patterns.
- Path Access Considerations: The package handling logic validates filenames within the document archive. It prevents the use of patterns that could lead to unintended file access, such as relative path markers (e.g., '..') or absolute paths, ensuring that operations remain within intended boundaries.
- Restricted Execution Environment: The skill is designed to operate without external dependencies, relying solely on the Python standard library. It does not perform network operations or execute arbitrary shell commands, which significantly limits the potential for unauthorized activity.
- Structured Data Handling: User-supplied information is processed as literal content for document placeholders using a defined schema. This approach ensures that input data is treated as text for document population rather than instructions for execution.
Audit Metadata