draft
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script (
build_docx.py) to transform Markdown content into a structured Word document. This execution is scoped to the skill's own files and is a core part of its intended functionality. - [EXTERNAL_DOWNLOADS]: The skill identifies a dependency on the
python-docxlibrary. This is a well-established and trusted package used for programmatic creation of .docx files. - [INDIRECT_PROMPT_INJECTION]: As the skill processes user-influenced novel content to generate documents, it inherently possesses a data ingestion surface. However, the script uses structured parsing and a standard document-generation library, which provides inherent protection against common injection attacks in the resulting file. No specific vulnerabilities were found in the parsing logic.
- [SAFE_PRACTICES]: The script includes logic to prevent overwriting existing files by automatically incrementing version numbers in filenames (e.g., 'Draft 1', 'Draft 2'), which protects user data integrity.
Audit Metadata