hwpx-core
Pass
Audited by Gen Agent Trust Hub on Apr 3, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill exhibits no malicious patterns. It performs document authoring and validation using standard file system operations and regex-based string manipulation consistent with the Hancom Office HWPX format.
- [COMMAND_EXECUTION]: Local subprocess spawning in
scripts/validate.pyand various tests is used to invoke thescripts/proofread.pyutility for automated quality checks. These calls are confined to local scripts and are not exploitable for arbitrary command injection. - [SAFE]: Dynamic module imports via
importlibinscripts/section_transplant.pyandscripts/office/pack.pyare used to resolve paths for internal library components. This mechanism is restricted to the skill's own directory structure and does not involve the loading of external or untrusted code.
Audit Metadata