docx-md
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements document processing functionality locally using standard Python libraries and well-known dependencies. It does not perform any network operations or execute arbitrary system commands.
- [SAFE]: Static analysis identified the use of
__import__("sys")inscripts/read_docx.py. This is a benign coding pattern used for standard error reporting and process management, referencing only the built-in system module. - [PROMPT_INJECTION]: The skill processes external document content which could theoretically contain instructions intended for the AI agent (indirect prompt injection). However, the skill itself provides no dangerous capabilities that would escalate this into a security risk, and this behavior is inherent to the tool's primary purpose of document review.
Audit Metadata