docx
Warn
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DYNAMIC_EXECUTION]:
scripts/office/soffice.pycontains logic to generate, compile, and inject a C shared library into running processes. - Runtime Compilation: The script defines a C source string (
_SHIM_SOURCE) that is written to a temporary file (/tmp/lo_socket_shim.c) and compiled into a shared object (.so) usinggccat runtime. - Process Injection: The resulting library is injected into the
sofficeprocess using theLD_PRELOADenvironment variable to shim socket-related system calls. - Purpose: This mechanism is intended to facilitate LibreOffice operation in restricted or sandboxed environments where AF_UNIX sockets are blocked.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted document data, creating a significant vulnerability surface for indirect prompt injection.
- Ingestion Point:
scripts/office/unpack.pyextracts XML content from user-provided.docxfiles into the workspace for processing. - Boundary Markers: No delimiters or "ignore embedded instructions" warnings are used when the agent is instructed to read or edit document content.
- Capability Inventory: The skill has access to high-privilege operations including subprocess execution (
gcc,soffice,git,pdftoppm) and file system writes (scripts/office/pack.py,scripts/comment.py). - Sanitization: External content is not sanitized or filtered before being interpolated into agent context, allowing instructions embedded in documents to potentially influence agent behavior.
- [COMMAND_EXECUTION]: The skill frequently executes external binaries to perform document operations.
scripts/office/soffice.pyexecutesgccfor library compilation andsofficefor document conversion.scripts/accept_changes.pyexecutessofficeto apply tracked changes.scripts/office/validators/redlining.pyexecutesgit diffto compare text content between document versions.SKILL.mdsuggests the use ofpdftoppmfor image generation.- [EXTERNAL_DOWNLOADS]:
SKILL.mdinstructs the agent/user to install the well-knowndocxlibrary globally using the commandnpm install -g docx.
Audit Metadata