xlsx
Warn
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The script
scripts/office/soffice.pydynamically generates C source code, compiles it into a shared library usinggccat runtime, and usesLD_PRELOADto inject the library into the LibreOffice process. This mechanism is intended to allow LibreOffice to function in restricted or sandboxed environments. - [COMMAND_EXECUTION]: The skill invokes external command-line utilities via the
subprocessmodule: gccis called to compile technical shims inscripts/office/soffice.py.sofficeis executed to recalculate spreadsheet formulas inscripts/recalc.py.gitis used for comparing document differences inscripts/office/validators/redlining.py.- [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: Processes user-supplied spreadsheet files (.xlsx, .csv, .tsv) through various scripts.
- Boundary markers: Instructions do not define markers for separating user data from agent instructions.
- Capability inventory: The skill can write to the file system, execute shell commands, and run LibreOffice macros for recalculation.
- Sanitization: Uses
defusedxmlto protect against XML-based vulnerabilities during document processing.
Audit Metadata