xlsx
Warn
Audited by Gen Agent Trust Hub on May 5, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/recalc.pyusessubprocess.runto executesoffice(LibreOffice) and system utilities liketimeoutandgtimeoutto perform headless spreadsheet calculations. - [COMMAND_EXECUTION]: The document validation module
scripts/office/validators/redlining.pyinvokes thegitutility viasubprocess.runto compute text-level differences during document auditing. - [COMMAND_EXECUTION]: The utility
scripts/office/soffice.pyexecutes thegcccompiler to build a shared library from dynamically generated C source code during the initialization phase. - [REMOTE_CODE_EXECUTION]: The skill performs dynamic code generation and execution in
scripts/office/soffice.pyby compiling a custom C shim into a shared object and injecting it into the execution environment using theLD_PRELOADenvironment variable to hook system socket calls. - [REMOTE_CODE_EXECUTION]: The
scripts/recalc.pymodule programmatically writes a StarBasic macro to the user's LibreOffice configuration directory (~/.config/libreoffice/4/user/basic/Standard/Module1.xba) to automate internal spreadsheet recalculation commands.
Audit Metadata