docx

Warn

Audited by Gen Agent Trust Hub on May 12, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill interacts with system-level command-line utilities using the Python subprocess module.
  • In scripts/office/soffice.py, it executes gcc to compile custom source code and soffice for document processing.
  • In scripts/accept_changes.py, it runs soffice to handle tracked changes.
  • In scripts/office/validators/redlining.py, it invokes git to perform text diffing.
  • [REMOTE_CODE_EXECUTION]: The skill performs dynamic code generation and library injection to modify application behavior.
  • The script scripts/office/soffice.py contains a hardcoded C source string (_SHIM_SOURCE) that it writes to a temporary file, compiles into a shared object using gcc, and then injects into the soffice process using the LD_PRELOAD environment variable.
  • The script scripts/accept_changes.py dynamically generates a LibreOffice StarBasic macro file (Module1.xba) in a temporary profile to automate the acceptance of tracked changes at runtime.
Audit Metadata
Risk Level
MEDIUM
Analyzed
May 12, 2026, 05:23 AM
Security Audit — agent-trust-hub — docx