word-reader
Warn
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
install.shscript and the metadata inSKILL.mdinstruct the user or system to usesudofor administrative tasks such asapt updateand installing system-level packages likepython3-pipandantiword. - [COMMAND_EXECUTION]: The core logic in
scripts/read_word.pyutilizes thesubprocessmodule to execute external system binaries (antiwordandwhich) to handle legacy.docfile formats. - [PROMPT_INJECTION]: The skill provides a surface for indirect prompt injection by extracting and presenting raw text from untrusted Word documents to the AI agent context.
- Ingestion points: Document parsing in
scripts/read_word.pyviapython-docxandantiword. - Boundary markers: None. Extracted text and table data are output directly without being wrapped in delimiters or accompanied by instructions to ignore embedded commands.
- Capability inventory: The skill can execute local Python scripts, perform file system operations, and potentially chain with other agent tools if instructions in the documents are followed.
- Sanitization: Content is extracted and returned in its original form without filtering or safety validation.
Audit Metadata