xlsx
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFE
Full Analysis
- [DYNAMIC_EXECUTION]: The script
scripts/office/soffice.pyperforms runtime compilation of a C shim usinggccand usesLD_PRELOAD. This is documented in the compatibility requirements as a necessary workaround for environments where Unix domain sockets are restricted. The implementation uses secure, randomized temporary directories and minimal environment variables to prevent credential leakage. - [COMMAND_EXECUTION]: The skill executes
sofficefor formula recalculation,gccfor shim compilation, andgitfor document diffing. These commands are invoked with controlled arguments and are essential for the skill's stated purpose. - [SAFE]: The archive extraction logic in
scripts/office/helpers/__init__.pyincludes robust protections against path traversal (ZipSlip) and prevents the extraction of symlinks, ensuring that file operations are confined to the intended workspace.
Audit Metadata