python-docx
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides instructions for utilizing established and reputable libraries, specifically python-docx, Pillow, and lxml, for document manipulation tasks. All installation commands target the official Python package registry.
- [INDIRECT_PROMPT_INJECTION]: The skill describes functionality for generating documents from data, which creates a potential surface for indirect prompt injection if the source data is untrusted.
- Ingestion points: The skill ingest data to build reports, contracts, and documentation as mentioned in SKILL.md.
- Boundary markers: No specific delimiters or instruction-isolation warnings are provided in the current documentation.
- Capability inventory: Includes file creation and modification capabilities via the python-docx library.
- Sanitization: The documentation does not specify sanitization or validation logic for the content being inserted into documents.
Audit Metadata