Skills
Navigate
skills/tugoukezhang/workbuddy-skills/minimax-docx/Gen Agent Trust Hub

minimax-docx

Fail

Audited by Gen Agent Trust Hub on Apr 15, 2026

Risk Level: HIGHCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill's setup scripts (scripts/setup.sh and scripts/setup.ps1) utilize sudo to perform system-level installations of dependencies such as the .NET SDK, Pandoc, and LibreOffice.
  • [COMMAND_EXECUTION]: The skill utilizes a dynamic execution model where the agent is instructed to generate custom C# scripts (.csx) and execute them via the dotnet runtime to handle complex document operations.
  • [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface through its placeholder filling and text replacement features.
  • Ingestion points: EditContentCommand.cs (replacement values), scripts/dotnet/task.csx (generated code logic).
  • Boundary markers: Absent. No explicit delimiters or instructions are used to distinguish untrusted data from document structure.
  • Capability inventory: Arbitrary shell command execution via dotnet run, system administration via sudo in setup scripts.
  • Sanitization: Present. The OpenXML SDK used in the CLI tools automatically handles XML character escaping for text content.
  • [EXTERNAL_DOWNLOADS]: Fetches the official .NET installation script from Microsoft's dot.net domain during the initialization process.
Recommendations
  • HIGH: Downloads and executes remote code from: https://dot.net/v1/dotnet-install.sh - DO NOT USE without thorough review
Audit Metadata
Risk Level
HIGH
Analyzed
Apr 15, 2026, 09:37 AM