xlsx
Warn
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: High-risk runtime compilation and process injection detected in
scripts/office/soffice.py. - The script embeds C source code (
_SHIM_SOURCE) which it writes to a temporary directory and compiles into a shared library (lo_socket_shim.so) usinggcc. - The resulting library is injected into the LibreOffice environment using the
LD_PRELOADenvironment variable to intercept and shim system calls related to AF_UNIX sockets. - While this is a documented workaround for sandboxed environments where Unix sockets are blocked, the pattern is identical to techniques used for process hijacking and persistence.
- [COMMAND_EXECUTION]: Multiple scripts execute system-level commands via
subprocess.runto perform core functions. scripts/office/soffice.pyinvokesgccfor compilation andsofficefor document processing.scripts/recalc.pyinvokessofficeandgtimeoutto manage long-running formula recalculations.scripts/office/validators/redlining.pyinvokesgit difffor document validation.- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an inherent attack surface by processing untrusted spreadsheet data.
- Ingestion points: Tabular data from Excel (.xlsx), CSV, and TSV files is read into the agent's context using
pandasandopenpyxlas described inSKILL.md. - Boundary markers: Absent. No instructions are provided to the agent to use delimiters or ignore embedded instructions when processing cell contents.
- Capability inventory: The skill possesses powerful capabilities including arbitrary shell command execution (
subprocess.run), file writing (Path.write_text,wb.save), and process injection. - Sanitization: Absent. The skill assumes spreadsheet contents are benign data rather than potentially containing adversarial natural language instructions.
- [PERSISTENCE_MECHANISMS]: The script
scripts/recalc.pymodifies the user's environment to enable automation. - It automatically installs a LibreOffice macro (
RecalculateAndSave) into the local user configuration folder (~/.config/libreoffice/or~/Library/Application Support/LibreOffice/).
Audit Metadata