docx-export
Warn
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The script
src/scripts/download_fonts.shis used to pull open-source alternative fonts from external network sources. The specific sources, URLs, and integrity checks for these downloads are not defined in the skill configuration. - [COMMAND_EXECUTION]: The skill's core functionality relies on executing multiple local shell scripts and Python scripts, including
src/scripts/generate_docx.py,src/scripts/install_fonts.sh,src/scripts/download_fonts.sh, andsrc/adapters/skill/build.py. - [PRIVILEGE_ESCALATION]: The script
src/scripts/install_fonts.shis designed to install font files fromassets/fonts/into the system's font repository. On most operating systems, modifying system-wide font directories requires administrative or elevated privileges, which may lead the agent to attempt privilege escalation.
Audit Metadata