docx

Warn

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: MEDIUMDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [DYNAMIC_EXECUTION]: scripts/office/soffice.py contains logic to generate, compile, and inject a C shared library into running processes.
  • Runtime Compilation: The script defines a C source string (_SHIM_SOURCE) that is written to a temporary file (/tmp/lo_socket_shim.c) and compiled into a shared object (.so) using gcc at runtime.
  • Process Injection: The resulting library is injected into the soffice process using the LD_PRELOAD environment variable to shim socket-related system calls.
  • Purpose: This mechanism is intended to facilitate LibreOffice operation in restricted or sandboxed environments where AF_UNIX sockets are blocked.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted document data, creating a significant vulnerability surface for indirect prompt injection.
  • Ingestion Point: scripts/office/unpack.py extracts XML content from user-provided .docx files into the workspace for processing.
  • Boundary Markers: No delimiters or "ignore embedded instructions" warnings are used when the agent is instructed to read or edit document content.
  • Capability Inventory: The skill has access to high-privilege operations including subprocess execution (gcc, soffice, git, pdftoppm) and file system writes (scripts/office/pack.py, scripts/comment.py).
  • Sanitization: External content is not sanitized or filtered before being interpolated into agent context, allowing instructions embedded in documents to potentially influence agent behavior.
  • [COMMAND_EXECUTION]: The skill frequently executes external binaries to perform document operations.
  • scripts/office/soffice.py executes gcc for library compilation and soffice for document conversion.
  • scripts/accept_changes.py executes soffice to apply tracked changes.
  • scripts/office/validators/redlining.py executes git diff to compare text content between document versions.
  • SKILL.md suggests the use of pdftoppm for image generation.
  • [EXTERNAL_DOWNLOADS]: SKILL.md instructs the agent/user to install the well-known docx library globally using the command npm install -g docx.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 25, 2026, 02:34 PM