docx
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes several internal Python scripts (such as
scripts/office/unpack.py,scripts/office/pack.py,scripts/office/soffice.py, andscripts/comment.py) and system binaries (pandoc,pdftoppm) to perform document conversion, extraction, and editing tasks. - [EXTERNAL_DOWNLOADS]: The skill instructions specify the installation of the
docxpackage from the npm registry usingnpm install -g docx. - [INDIRECT_PROMPT_INJECTION]: The skill operates on untrusted Word documents, creating a potential surface for indirect prompt injection attacks where content within the documents might influence the agent's behavior.
- Ingestion points: Content is ingested from
.docxfiles viapandoctext extraction and XML unpacking inSKILL.md. - Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded commands within the document text.
- Capability inventory: The skill has capabilities for file writing (
fs.writeFileSync), XML modification, and execution of various local processing scripts. - Sanitization: No sanitization or validation logic is specified for the text content extracted from external documents.
Audit Metadata