xlsx
Fail
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: HIGHCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/office/soffice.pyinvokes thegcccompiler at runtime to build a shared object file from an embedded C source string.\n- [REMOTE_CODE_EXECUTION]: The skill utilizes theLD_PRELOADenvironment variable to inject a dynamically compiled shared library into thesofficeprocess, which allows for the redirection and shimming of standard system calls.\n- [COMMAND_EXECUTION]: The scriptscripts/recalc.pyusessubprocess.runto execute LibreOffice in headless mode with a custom script execution URL.\n- [COMMAND_EXECUTION]: The skill modifies sensitive application configuration paths (e.g.,~/.config/libreoffice) to persist StarBasic macros used for the formula recalculation workflow.
Recommendations
- AI detected serious security threats
Audit Metadata