gap-to-topic
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill leverages a local Node.js script,
dossier_to_docx.js, to convert generated Markdown dossiers into Word documents. This script performs standard local file system operations (reading source text and writing document buffers) consistent with its primary function. - [EXTERNAL_DOWNLOADS]: The skill documentation guides the installation of the
docxNode.js library. This is a well-known and widely used library for document generation, and its use here is standard for the skill's utility. - [DATA_EXFILTRATION]: While the skill reads research data and search results, there are no network exfiltration patterns. All file operations in the provided scripts are local, and no unauthorized external communication or credential harvesting was found.
- [PROMPT_INJECTION]: The instructions include defensive 'Honesty rules' and mandatory 'adversarial' search requirements. these are best-practice constraints designed to ensure the agent provides accurate evidence and acknowledges recall limitations rather than attempting to bypass safety filters.
Audit Metadata