doc
Pass
Audited by Gen Agent Trust Hub on Feb 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes system utilities
soffice(LibreOffice) andpdftoppm(Poppler) to convert documents and render page images. These calls are implemented using Python'ssubprocess.runwith argument lists, which prevents shell injection vulnerabilities. - [EXTERNAL_DOWNLOADS]: The skill requires standard Python packages
python-docxandpdf2image, as well as well-known system toolslibreofficeandpoppler-utils. The instructions for installation viapip,brew, orapt-getare standard for document-processing environments. - [SAFE]: The skill demonstrates safe coding practices, including the use of temporary directories for processing and secure subprocess handling. No evidence of data exfiltration, hardcoded credentials, or malicious prompt injection was found during analysis.
Audit Metadata