syncfusion-javascript-docx
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation for a legitimate commercial library from a verified vendor (Syncfusion). All external resources, such as the
@syncfusion/ej2-docxNPM package and links tosyncfusion.com, are consistent with the author's identity and stated purpose. - [SAFE]: Code examples demonstrate standard Node.js and browser file operations (fs.readFileSync, fs.writeFileSync, and browser Blob/File handling) that are essential and appropriate for the skill's purpose of creating and editing Word documents.
- [SAFE]: The skill explicitly addresses security considerations in the 'Security' section of
references/troubleshooting.md. It provides proactive advice on mitigating risks from untrusted files, such as usingLoadOptions.limitsfor zip bomb protection and implementing proper error handling for malformed content. - [SAFE]: No evidence of prompt injection, data exfiltration, obfuscation, or unauthorized privilege escalation was found. The instructions and scripts remain within the expected scope of a document processing library.
Audit Metadata