Security audit
Security checks for vulnerabilities and agentic risk
The skill is rated suspicious because scanners report that its preview and PDF export steps can close all accessible Word sessions and that rendering can delete existing PNG files in the output folder.
Consider the risk of losing unsaved Word work or existing images before installing. The scan covered all nine listed components but is marked partial because one local path-like reference could not be resolved, so the evidence is incomplete.
scripts/export_pdf.ps1PDF export forcibly terminates every accessible Word process
Other open Word sessions can be terminated, interrupting unrelated work and losing unsaved edits. The effect is limited by the caller's process permissions.
The preview instructions present global forced termination as a workaround without warning that unrelated documents may lose unsaved changes. This is the same unsafe operation identified by the other finding in this source, with the missing warning making accidental execution more likely.
The finally block enumerates all accessible WINWORD processes and forcibly terminates them, including unrelated user editing sessions. It runs even when opening or exporting fails, so an ordinary preview attempt can cause loss of unsaved work independently of export success.
Without declared permissions the skill's intent is opaque and cannot be validated.
The preview example force-stops every accessible WINWORD process rather than only the automation instance. Following this routine document-export guidance can terminate unrelated editing sessions and lose unsaved work, exceeding the scope of the requested task.
Before rendering, the script deletes every file matching p*.png in the selected output directory, not just images previously generated by this tool. Reusing an existing directory can therefore silently delete unrelated images such as portrait.png, and a subsequent rendering failure leaves those files lost without replacement.