draft

Pass

Audited by Gen Agent Trust Hub on Jul 15, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a local Python script (build_docx.py) to transform Markdown content into a structured Word document. This execution is scoped to the skill's own files and is a core part of its intended functionality.
  • [EXTERNAL_DOWNLOADS]: The skill identifies a dependency on the python-docx library. This is a well-established and trusted package used for programmatic creation of .docx files.
  • [INDIRECT_PROMPT_INJECTION]: As the skill processes user-influenced novel content to generate documents, it inherently possesses a data ingestion surface. However, the script uses structured parsing and a standard document-generation library, which provides inherent protection against common injection attacks in the resulting file. No specific vulnerabilities were found in the parsing logic.
  • [SAFE_PRACTICES]: The script includes logic to prevent overwriting existing files by automatically incrementing version numbers in filenames (e.g., 'Draft 1', 'Draft 2'), which protects user data integrity.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 15, 2026, 09:53 AM