officecli-docx
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill follows security best practices by explicitly prohibiting network access and external downloads, requiring all tools to be pre-installed in the environment.
- [COMMAND_EXECUTION]: Local shell commands are restricted to non-arbitrary operations using established tools (OfficeCLI and LibreOffice) for document processing, conversion, and validation.
- [INDIRECT_PROMPT_INJECTION]: The skill manages the risk of processing untrusted document content from user-uploaded files by providing a mandatory 'Delivery Gate' validation step. This process includes sanitization via regex checks for leaked placeholders and structural validation using tool-specific schema checks to ensure content remains distinct from instructions.
- [SAFE]: A comprehensive quality assurance process is defined to ensure output integrity through structural and visual verification steps.
Audit Metadata