docx
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the 'docx' package from the npm registry for document generation. This is a standard and well-known library.
- [COMMAND_EXECUTION]: The skill executes multiple command-line utilities, including 'pandoc' for text extraction, 'pdftoppm' for image conversion, and various local Python scripts (e.g., 'soffice.py', 'unpack.py', 'pack.py') for format conversion and XML manipulation. These tools are used for the skill's primary functionality.
- [PROMPT_INJECTION]: The skill processes content from external '.docx' files, which presents a surface for indirect prompt injection. Ingestion points: Document content is extracted via 'pandoc' as described in SKILL.md. Boundary markers: There are no specific delimiters or instructions for the agent to ignore embedded commands within the extracted content. Capability inventory: The skill can execute shell commands, perform file system writes, and install packages. Sanitization: No sanitization or validation of the extracted document content is mentioned before it is processed by the agent.
Audit Metadata