docx
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill demonstrates high security awareness by using the
defusedxmllibrary for all XML parsing tasks. This effectively mitigates XML External Entity (XXE) vulnerabilities often found in Office document processing tools. - [SAFE]: Operations involving file manipulation and document repacking are executed within temporary directories created using
tempfile. This practice protects the user's primary workspace and prevents accidental overwrites or data leakage. - [SAFE]: External command executions via
subprocess.runare limited to trusted system utilities likesoffice(LibreOffice) andgit. These are used specifically for validating document integrity and generating text diffs during the redlining workflow. - [SAFE]: The documentation provides clear, safe instructions for setting up required environment dependencies using standard package managers (apt, npm, pip).
Audit Metadata