Security risk report for @forgecat/openai_skills_doc v0.0.11
Source Integrity
Low
Profile is sourced from OpenAI's official public repository (github.com/openai/skills), a trusted upstream.
Metadata includes verifiable commit hash and timestamp; no obfuscation or suspicious origin indicators.
Agent Intent
Low
Content describes legitimate document processing workflows using standard, well-known Python libraries (python-docx, pdf2image) and system tools (LibreOffice, Poppler).
No instructions to read credentials, exfiltrate data, ignore system prompts, or execute remote payloads.
Guidance on dependency installation and rendering is standard practice documentation, not poisoning; no typosquatted or attacker-controlled packages are recommended.
Details
Evidence
Workflow section recommends 'python-docx' and 'scripts/render_docx.py' for visual checks — legitimate, documented tools.
Dependencies list only 'python-docx pdf2image' and system tools 'libreoffice poppler-utils' — all publicly maintained, non-malicious packages.
No instructions to fetch external URLs, modify system files, or alter agent behavior.
Permissions
Low
No tools or hooks are declared in the profile; the skill is purely instructional guidance for the agent.
Recommended operations (file read/write in tmp/ and output/ directories, document rendering) are scoped and aligned with the stated purpose of DOCX document handling.
No shell execution, file deletion, or network access is mandated; all system tool invocations are optional and conditional on user environment.
Details
Evidence
Workflow explicitly scopes temp files to 'tmp/docs/' and outputs to 'output/doc/' with cleanup instructions.
Rendering commands are examples only; agent is instructed to 'ask the user' or 'tell the user' if tools are missing, not to force installation.
No alwaysApply rules, glob patterns, or excessive agency claims.
MCP Risk
Low
No MCP servers are defined in the profile.
No hidden instructions in tool descriptions or arbitrary binary execution requirements.
Details
Evidence
MCP servers section is empty; no external host access or credential requirements.
ForgeCat