docx
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses system binaries for document processing tasks.
ooxml/scripts/pack.pyusessubprocess.runto callsoffice(LibreOffice) for document validation.ooxml/scripts/validation/redlining.pyusessubprocess.runto callgit difffor comparing document changes.- These calls are targeted at specific, well-known binaries with arguments controlled by the script logic.
- [EXTERNAL_DOWNLOADS]: The documentation guides the installation of standard tools and libraries.
- It instructs the user/agent to install
pandoc,libreoffice, andpoppler-utilsvia system package managers. - It lists official package registry dependencies like the
docxNode.js library and thedefusedxmlPython library. - [DATA_EXFILTRATION]: The skill implements strong protections against XML-based data exposure.
- Multiple components (
document.py,unpack.py,pack.py,utilities.py) usedefusedxmlto parse XML files, preventing XML External Entity (XXE) attacks which are a common risk in document processing.
Audit Metadata