pptx
Fail
Audited by Gen Agent Trust Hub on Apr 6, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The file
scripts/office/soffice.pycontains an embedded C source string that is written to a temporary file, compiled withgcc, and loaded as a shared library into thesofficeprocess using theLD_PRELOADenvironment variable. This shim is designed to intercept and modify the behavior of networking-related system calls includingsocket,listen,accept, andclose. - [COMMAND_EXECUTION]: Multiple scripts within the skill execute shell commands via the
subprocessmodule: scripts/office/soffice.pyexecutesgccto perform the runtime compilation mentioned above.scripts/thumbnail.pyexecutes system utilities such assofficeandpdftoppmto convert PowerPoint files into images.scripts/office/validators/redlining.pyexecutes thegitcommand to generate word-level diffs for document comparison.
Recommendations
- AI detected serious security threats
Audit Metadata