감사 이력
docx - 4 감사들
감사 버전 4
최신 안전Jan 17, 2026, 06:51 AM
This is a legitimate document processing skill with no security concerns. All 1146 static findings are false positives: documentation code blocks (pandoc, soffice commands), OOXML schema namespace URLs, and XML attribute names misidentified as crypto/C2 patterns. The code uses safe XML parsing (defusedxml) to prevent XXE attacks.
위험 요인
📁 파일 시스템 액세스 (3)
🌐 네트워크 접근 (2)
감사 버전 3
안전Jan 17, 2026, 06:51 AM
This is a legitimate document processing skill with no security concerns. All 1146 static findings are false positives: documentation code blocks (pandoc, soffice commands), OOXML schema namespace URLs, and XML attribute names misidentified as crypto/C2 patterns. The code uses safe XML parsing (defusedxml) to prevent XXE attacks.
위험 요인
📁 파일 시스템 액세스 (3)
🌐 네트워크 접근 (2)
감사 버전 2
안전Jan 12, 2026, 04:27 PM
This is a legitimate document processing skill with no security concerns. All static findings are false positives: documentation code blocks (pandoc, soffice commands), OOXML schema namespace URLs, and XML attribute names misidentified as crypto/C2 patterns. The code uses safe XML parsing (defusedxml) to prevent XXE attacks.
위험 요인
🌐 네트워크 접근 (2)
📁 파일 시스템 액세스 (3)
감사 버전 1
낮은 위험Jan 4, 2026, 05:14 PM
This is a legitimate document processing skill with controlled filesystem access and secure XML parsing. Uses defusedxml library to prevent XXE attacks. External commands (soffice, git) are called with hardcoded paths and controlled arguments. Operations are confined to user-specified files within designated workspaces.