監査履歴
docx - 4 監査
監査バージョン 4
最新 安全Jan 17, 2026, 06:51 AM
This is a legitimate document processing skill with no security concerns. All 1146 static findings are false positives: documentation code blocks (pandoc, soffice commands), OOXML schema namespace URLs, and XML attribute names misidentified as crypto/C2 patterns. The code uses safe XML parsing (defusedxml) to prevent XXE attacks.
リスク要因
📁 ファイルシステムへのアクセス (3)
🌐 ネットワークアクセス (2)
監査バージョン 3
安全Jan 17, 2026, 06:51 AM
This is a legitimate document processing skill with no security concerns. All 1146 static findings are false positives: documentation code blocks (pandoc, soffice commands), OOXML schema namespace URLs, and XML attribute names misidentified as crypto/C2 patterns. The code uses safe XML parsing (defusedxml) to prevent XXE attacks.
リスク要因
📁 ファイルシステムへのアクセス (3)
🌐 ネットワークアクセス (2)
監査バージョン 2
安全Jan 12, 2026, 04:27 PM
This is a legitimate document processing skill with no security concerns. All static findings are false positives: documentation code blocks (pandoc, soffice commands), OOXML schema namespace URLs, and XML attribute names misidentified as crypto/C2 patterns. The code uses safe XML parsing (defusedxml) to prevent XXE attacks.
リスク要因
🌐 ネットワークアクセス (2)
📁 ファイルシステムへのアクセス (3)
監査バージョン 1
低リスクJan 4, 2026, 05:14 PM
This is a legitimate document processing skill with controlled filesystem access and secure XML parsing. Uses defusedxml library to prevent XXE attacks. External commands (soffice, git) are called with hardcoded paths and controlled arguments. Operations are confined to user-specified files within designated workspaces.