doc-hwp
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill handles untrusted data from multiple file formats including HWPX, XLSX, CSV, and JSON to generate document content. These ingestion points are described in SKILL.md and references/format-converter.md. There are no explicit boundary markers or sanitization procedures mentioned to mitigate the risk of instructions embedded in the processed data. The skill possesses capabilities such as file writing via zipfile and execution via the Bash tool.
- [EXTERNAL_DOWNLOADS]: The skill documentation guides the user to install external Python packages python-hwpx, lxml, and olefile to support HWP and HWPX document manipulation.
- [COMMAND_EXECUTION]: The skill uses shell-based checks (python -c) for environment verification and references the use of a Bash tool to execute document conversion scripts and external utilities like pandoc.
Audit Metadata