office-document

Pass

Audited by Gen Agent Trust Hub on Aug 28, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install format-specific document skills from the official NousResearch/hermes-agent GitHub repository using the 'npx skills add' command. This is documented as the standard procedure for extending the agent's capabilities with official tools.- [REMOTE_CODE_EXECUTION]: By instructing the agent to install external skills, the skill enables the execution of remote scripts and instructions from the NousResearch repository. This is a functional requirement for the task and targets a well-known research organization's official repository.- [INDIRECT_PROMPT_INJECTION]: The skill interprets user requests to decide which specialized document tool to install. While this relies on processing untrusted user input, the skill provides specific constraints and decision rules to ensure only official, appropriate tools are invoked, minimizing the risk of arbitrary code installation.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 28, 2026, 02:59 AM
Security Audit — agent-trust-hub — office-document