docx
Warn
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of the
subprocessmodule to execute external binaries, includingsoffice(LibreOffice),git, andgccacross multiple scripts (scripts/accept_changes.py,scripts/office/soffice.py, andscripts/office/validators/redlining.py). - [DYNAMIC_EXECUTION]: In
scripts/office/soffice.py, the skill dynamically generates C source code, writes it to a temporary location, and compiles it into a shared object (.so) file usinggcc. This library is then injected into the LibreOffice process using theLD_PRELOADenvironment variable to shim network socket behavior. While this appears to be a functional workaround for sandbox limitations, it is a high-risk process injection technique. - [COMMAND_EXECUTION]: The script
scripts/accept_changes.pygenerates and executes a StarBasic macro within the LibreOffice environment to automate document changes, which involves executing arbitrary code within the Office suite context. - [EXTERNAL_DOWNLOADS]: The documentation in
SKILL.mdinstructs the user to perform a global installation of a Node.js package (npm install -g docx), which introduces an external dependency into the execution environment.
Audit Metadata