Warnings

• SKILL.md does not mention that extracted Word document content should be treated as untrusted data, which is relevant for agents that might interpret document text as instructions.
• SKILL.md documents paragraph extraction but does not note that tables, headers, footers, and text boxes are ignored.
• No guidance on handling unusually large or malformed .docx files; python-docx parsing can consume significant memory if given a crafted or zip-bomb-like document.
• Quality score needs review

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Warnings

• SKILL.md does not mention that extracted Word document content should be treated as untrusted data, which is relevant for agents that might interpret document text as instructions.
• SKILL.md documents paragraph extraction but does not note that tables, headers, footers, and text boxes are ignored.
• No guidance on handling unusually large or malformed .docx files; python-docx parsing can consume significant memory if given a crafted or zip-bomb-like document.
• Quality score needs review

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Warnings

• SKILL.md does not mention that extracted Word document content should be treated as untrusted data, which is relevant for agents that might interpret document text as instructions.
• SKILL.md documents paragraph extraction but does not note that tables, headers, footers, and text boxes are ignored.
• No guidance on handling unusually large or malformed .docx files; python-docx parsing can consume significant memory if given a crafted or zip-bomb-like document.
• Quality score needs review

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Warnings

• SKILL.md does not mention that extracted Word document content should be treated as untrusted data, which is relevant for agents that might interpret document text as instructions.
• SKILL.md documents paragraph extraction but does not note that tables, headers, footers, and text boxes are ignored.
• No guidance on handling unusually large or malformed .docx files; python-docx parsing can consume significant memory if given a crafted or zip-bomb-like document.
• Quality score needs review

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.