xlsx

Pass

Audited by Gen Agent Trust Hub on Oct 1, 2026

Risk Level: SAFE
Full Analysis
  • [DYNAMIC_EXECUTION]: The script scripts/office/soffice.py performs runtime compilation of a C shim using gcc and uses LD_PRELOAD. This is documented in the compatibility requirements as a necessary workaround for environments where Unix domain sockets are restricted. The implementation uses secure, randomized temporary directories and minimal environment variables to prevent credential leakage.
  • [COMMAND_EXECUTION]: The skill executes soffice for formula recalculation, gcc for shim compilation, and git for document diffing. These commands are invoked with controlled arguments and are essential for the skill's stated purpose.
  • [SAFE]: The archive extraction logic in scripts/office/helpers/__init__.py includes robust protections against path traversal (ZipSlip) and prevents the extraction of symlinks, ensuring that file operations are confined to the intended workspace.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 1, 2026, 08:21 PM