report-to-google-doc
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Subprocess Execution: The skill uses
subprocess.run()to invoke system rendering tools likersvg-convertfor SVG-to-PNG conversion. This is a standard approach for utilizing system-level graphics utilities when Python-native libraries are unavailable. - Dynamic Module Loading: The script uses
__import__to check for the availability of the Pillow library (PIL.Image) at runtime. This allows the skill to gracefully handle different environment configurations and provide fallback rendering paths. - Optional External Dependencies: The documentation suggests installing several well-known libraries such as
beautifulsoup4,pillow,python-docx, andcairosvg. These are standard, widely-trusted industry tools used for HTML parsing and document generation.
Audit Metadata