skills/beita6969/scienceclaw/pptx/Gen Agent Trust Hub

pptx

Fail

Audited by Gen Agent Trust Hub on Apr 6, 2026

Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The file scripts/office/soffice.py contains an embedded C source string that is written to a temporary file, compiled with gcc, and loaded as a shared library into the soffice process using the LD_PRELOAD environment variable. This shim is designed to intercept and modify the behavior of networking-related system calls including socket, listen, accept, and close.
  • [COMMAND_EXECUTION]: Multiple scripts within the skill execute shell commands via the subprocess module:
  • scripts/office/soffice.py executes gcc to perform the runtime compilation mentioned above.
  • scripts/thumbnail.py executes system utilities such as soffice and pdftoppm to convert PowerPoint files into images.
  • scripts/office/validators/redlining.py executes the git command to generate word-level diffs for document comparison.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Apr 6, 2026, 11:31 PM
Security Audit — agent-trust-hub — pptx