office-repair
Warn
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: MEDIUMREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The
archive_generatorfunction inscripts/office_repair.pyperforms code injection by prepending a guard block to Python scripts. This injected code executes logic to prevent file overwrites and usesatexithandlers to restore data. - [COMMAND_EXECUTION]: The script
scripts/test_office_repair.pyinvokessubprocess.runto execute Python scripts, including those modified by the archiving feature. - [COMMAND_EXECUTION]: The skill uses Windows COM and PowerShell (via the
ane_package.officeopslibrary) for Office document manipulation. - [PROMPT_INJECTION]: The skill processes untrusted content from Office documents through
extract_textinscripts/office_repair.py, creating an indirect prompt injection vector. - Ingestion points: Content is read from Word, Excel, and PowerPoint files.
- Boundary markers: No delimiters are used to separate ingested content from instructions.
- Capability inventory: File writing, subprocess execution, and COM-based application control.
- Sanitization: No sanitization is performed on extracted text to prevent instruction follow-through.
Audit Metadata