writer
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends the installation of standard document processing libraries from the Python Package Index (PyPI).
- Evidence:
pip install odfpyandpip install ezodfinSKILL.md. - [COMMAND_EXECUTION]: The skill utilizes system commands to automate LibreOffice and manage document archives.
- Evidence: Use of
soffice,unzip,zip, andkillallvia shell and Python'ssubprocessmodule inSKILL.md. - [PROMPT_INJECTION]: The template generation logic creates a surface for indirect prompt injection if untrusted data is interpolated into document XML.
- Ingestion points:
template_pathandvariablesdictionary in thegenerate_from_templatefunction inSKILL.md. - Boundary markers: None present.
- Capability inventory:
subprocess.runandsofficecommands used for file processing and conversion inSKILL.md. - Sanitization: No explicit sanitization or escaping is performed on the variables before they are inserted into the document's XML structure.
Audit Metadata