xlsx

Fail

Audited by Gen Agent Trust Hub on Jul 13, 2026

Risk Level: HIGHCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/office/soffice.py invokes the gcc compiler at runtime to build a shared object file from an embedded C source string.\n- [REMOTE_CODE_EXECUTION]: The skill utilizes the LD_PRELOAD environment variable to inject a dynamically compiled shared library into the soffice process, which allows for the redirection and shimming of standard system calls.\n- [COMMAND_EXECUTION]: The script scripts/recalc.py uses subprocess.run to execute LibreOffice in headless mode with a custom script execution URL.\n- [COMMAND_EXECUTION]: The skill modifies sensitive application configuration paths (e.g., ~/.config/libreoffice) to persist StarBasic macros used for the formula recalculation workflow.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Jul 13, 2026, 10:21 AM