skills/hocgin/agent-skills/docx/Gen Agent Trust Hub

docx

Warn

Audited by Gen Agent Trust Hub on Mar 24, 2026

Risk Level: MEDIUMCOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill performs dynamic code compilation and process injection to facilitate document conversion.\n
  • In scripts/office/soffice.py, the script writes a C source file to the temporary directory and compiles it into a shared object (.so) using gcc via subprocess.run.\n
  • The resulting library is then injected into the soffice process using the LD_PRELOAD environment variable to shim socket functions.\n
  • scripts/accept_changes.py writes a LibreOffice Basic macro to a temporary profile and executes it via the soffice command line to automate document modifications.\n
  • Several scripts (accept_changes.py, soffice.py, redlining.py) utilize subprocess.run to invoke external binaries including gcc, soffice, and git.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 24, 2026, 07:33 AM
Security Audit — agent-trust-hub — docx