docx-editor-cn
Warn
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Multiple scripts execute external system utilities like
pandoc,libreoffice, andgitviasubprocess.runto perform document processing and validation tasks.\n- [COMMAND_EXECUTION]: The skill usesgccto compile a C-based socket shim at runtime, which is then loaded into the LibreOffice process usingLD_PRELOAD. This technique is employed as a functional workaround to enable inter-process communication in restricted environments.\n- [PROMPT_INJECTION]: The skill processes untrusted external Markdown and Word document content which is then used to drive logic across various scripts (new_doc.js,formula.py,table.py), creating a surface for indirect prompt injection. Ingestion occurs at document read points where boundary markers or full content sanitization are not explicitly implemented.
Audit Metadata