draw

Pass

Audited by Gen Agent Trust Hub on Jun 20, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the soffice (LibreOffice) binary to perform vector graphics tasks and format conversions (ODG to PDF, SVG, or PNG). It also includes a killall command for process management, which is standard for handling headless office instances.
  • [EXTERNAL_DOWNLOADS]: Recommends the installation of widely recognized Python packages (ezodf, odfpy, and svgwrite) for processing OpenDocument and SVG files. These are standard dependencies for the stated purpose.
  • [REMOTE_CODE_EXECUTION]: Uses the Python UNO bridge to interact with the LibreOffice API via a local socket (localhost:8100). While this involves inter-process communication, it is limited to the local environment and the intended application automation.
  • [DATA_EXFILTRATION]: While the skill accesses local files for conversion and editing, there are no network operations targeting external or untrusted domains. All network-like references are for local IPC.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 20, 2026, 09:13 PM
Security Audit — agent-trust-hub — draw