office-repair
Warn
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The
archive_generatorfunction inscripts/office_repair.pymodifies existing Python scripts on disk by prepending a code guard. This guard utilizesatexitand filesystem operations to ensure file integrity during execution. - [DYNAMIC_EXECUTION]: The
_bootstrap_ane_packagefunction dynamically modifiessys.pathat runtime to include paths derived from environment variables and the user's home directory (OneDrive), which is used to load theane_packagelibrary. - [COMMAND_EXECUTION]:
scripts/test_office_repair.pyexecutes shell commands and Python scripts usingsubprocess.runto verify the behavior of the driver and its code-guarding mechanism. - [INDIRECT_PROMPT_INJECTION]: The skill processes Office documents (Excel, Word, PowerPoint) which serve as untrusted input. Malicious content within these files could potentially influence the agent's behavior or interact with the skill's capabilities.
- Ingestion points: Office files are read using
openpyxl,python-docx,python-pptx, and Excel COM interop inscripts/office_repair.py. - Boundary markers: The skill follows an "edit-preservation-protocol" and requires explicit user agreement on fix lists before applying changes.
- Capability inventory: Includes file-write operations, Office COM interop (via PowerShell), and subprocess execution (in tests).
- Sanitization: The
difflogic identifies common Office autocorrect artefacts but does not include sanitization for embedded instructions.
Audit Metadata