Historial de auditorías
docx - 4 auditorías
Versión de auditoría 4
Más reciente SeguroJan 17, 2026, 06:51 AM
This is a legitimate document processing skill with no security concerns. All 1146 static findings are false positives: documentation code blocks (pandoc, soffice commands), OOXML schema namespace URLs, and XML attribute names misidentified as crypto/C2 patterns. The code uses safe XML parsing (defusedxml) to prevent XXE attacks.
Factores de riesgo
📁 Acceso al sistema de archivos (3)
🌐 Acceso a red (2)
⚡ Contiene scripts (2)
Versión de auditoría 3
SeguroJan 17, 2026, 06:51 AM
This is a legitimate document processing skill with no security concerns. All 1146 static findings are false positives: documentation code blocks (pandoc, soffice commands), OOXML schema namespace URLs, and XML attribute names misidentified as crypto/C2 patterns. The code uses safe XML parsing (defusedxml) to prevent XXE attacks.
Factores de riesgo
📁 Acceso al sistema de archivos (3)
🌐 Acceso a red (2)
⚡ Contiene scripts (2)
Versión de auditoría 2
SeguroJan 12, 2026, 04:27 PM
This is a legitimate document processing skill with no security concerns. All static findings are false positives: documentation code blocks (pandoc, soffice commands), OOXML schema namespace URLs, and XML attribute names misidentified as crypto/C2 patterns. The code uses safe XML parsing (defusedxml) to prevent XXE attacks.
Factores de riesgo
⚡ Contiene scripts (2)
🌐 Acceso a red (2)
📁 Acceso al sistema de archivos (3)
Versión de auditoría 1
Riesgo bajoJan 4, 2026, 05:14 PM
This is a legitimate document processing skill with controlled filesystem access and secure XML parsing. Uses defusedxml library to prevent XXE attacks. External commands (soffice, git) are called with hardcoded paths and controlled arguments. Operations are confined to user-specified files within designated workspaces.