skills/snyk/agent-scan/docx/Gen Agent Trust Hub

docx

Pass

Audited by Gen Agent Trust Hub on Oct 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill demonstrates high security awareness by using the defusedxml library for all XML parsing tasks. This effectively mitigates XML External Entity (XXE) vulnerabilities often found in Office document processing tools.
  • [SAFE]: Operations involving file manipulation and document repacking are executed within temporary directories created using tempfile. This practice protects the user's primary workspace and prevents accidental overwrites or data leakage.
  • [SAFE]: External command executions via subprocess.run are limited to trusted system utilities like soffice (LibreOffice) and git. These are used specifically for validating document integrity and generating text diffs during the redlining workflow.
  • [SAFE]: The documentation provides clear, safe instructions for setting up required environment dependencies using standard package managers (apt, npm, pip).
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 17, 2026, 09:09 PM