skills/atxinsky/skills/xlsx/Gen Agent Trust Hub

xlsx

Warn

Audited by Gen Agent Trust Hub on Aug 14, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [DYNAMIC_EXECUTION]: High-risk runtime compilation and process injection detected in scripts/office/soffice.py.
  • The script embeds C source code (_SHIM_SOURCE) which it writes to a temporary directory and compiles into a shared library (lo_socket_shim.so) using gcc.
  • The resulting library is injected into the LibreOffice environment using the LD_PRELOAD environment variable to intercept and shim system calls related to AF_UNIX sockets.
  • While this is a documented workaround for sandboxed environments where Unix sockets are blocked, the pattern is identical to techniques used for process hijacking and persistence.
  • [COMMAND_EXECUTION]: Multiple scripts execute system-level commands via subprocess.run to perform core functions.
  • scripts/office/soffice.py invokes gcc for compilation and soffice for document processing.
  • scripts/recalc.py invokes soffice and gtimeout to manage long-running formula recalculations.
  • scripts/office/validators/redlining.py invokes git diff for document validation.
  • [INDIRECT_PROMPT_INJECTION]: The skill exhibits an inherent attack surface by processing untrusted spreadsheet data.
  • Ingestion points: Tabular data from Excel (.xlsx), CSV, and TSV files is read into the agent's context using pandas and openpyxl as described in SKILL.md.
  • Boundary markers: Absent. No instructions are provided to the agent to use delimiters or ignore embedded instructions when processing cell contents.
  • Capability inventory: The skill possesses powerful capabilities including arbitrary shell command execution (subprocess.run), file writing (Path.write_text, wb.save), and process injection.
  • Sanitization: Absent. The skill assumes spreadsheet contents are benign data rather than potentially containing adversarial natural language instructions.
  • [PERSISTENCE_MECHANISMS]: The script scripts/recalc.py modifies the user's environment to enable automation.
  • It automatically installs a LibreOffice macro (RecalculateAndSave) into the local user configuration folder (~/.config/libreoffice/ or ~/Library/Application Support/LibreOffice/).
Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 14, 2026, 04:00 PM
Security Audit — agent-trust-hub — xlsx