docx
Warn
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill interacts with system-level command-line utilities using the Python
subprocessmodule. - In
scripts/office/soffice.py, it executesgccto compile custom source code andsofficefor document processing. - In
scripts/accept_changes.py, it runssofficeto handle tracked changes. - In
scripts/office/validators/redlining.py, it invokesgitto perform text diffing. - [REMOTE_CODE_EXECUTION]: The skill performs dynamic code generation and library injection to modify application behavior.
- The script
scripts/office/soffice.pycontains a hardcoded C source string (_SHIM_SOURCE) that it writes to a temporary file, compiles into a shared object usinggcc, and then injects into thesofficeprocess using theLD_PRELOADenvironment variable. - The script
scripts/accept_changes.pydynamically generates a LibreOffice StarBasic macro file (Module1.xba) in a temporary profile to automate the acceptance of tracked changes at runtime.
Audit Metadata