doc
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses system tools for document processing.
- The bundled Python script
scripts/render_docx.pysafely executessoffice(LibreOffice) by passing arguments as a list tosubprocess.run, which prevents shell command injection. - The
SKILL.mdfile contains standard shell command examples for rendering documents withsofficeandpdftoppm. - [EXTERNAL_DOWNLOADS]: The skill provides installation instructions for standard and reputable software.
- Python packages mentioned include
python-docxandpdf2imagefrom standard registries. - System tools include
libreofficeandpoppler-utilsfrom official package managers. - [SAFE]: No malicious patterns such as obfuscation, credential harvesting, or unauthorized data exfiltration were identified. The skill correctly utilizes temporary directories for its intermediate rendering steps.
Audit Metadata