docx
Pass
Audited by Gen Agent Trust Hub on Mar 27, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes system utilities via subprocess calls for validation purposes:
- In
ooxml/scripts/pack.py,soffice(LibreOffice) is invoked to ensure document convertibility. - In
ooxml/scripts/validation/redlining.py,git diffis used for structural comparison. These calls are secure as they avoid the shell, use argument lists, and target local temporary files. - [SAFE]: The skill follows security best practices by using the
defusedxmllibrary for all XML parsing, providing protection against common XML vulnerabilities such as External Entity (XXE) injection.
Audit Metadata