xlsx
Warn
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill performs runtime compilation and library injection to facilitate formula recalculation.
- File:
scripts/office/soffice.pycontains a hardcoded C source string (_SHIM_SOURCE) that is written to a temporary file and compiled usinggccviasubprocess.runto create a shared library. - File:
scripts/office/soffice.pyuses theLD_PRELOADenvironment variable to inject this compiled shim into the LibreOffice (soffice) process to modify socket behavior. - File:
scripts/recalc.pydynamically generates a LibreOffice macro (Module1.xba) and writes it to the user's LibreOffice configuration directory to automate thecalculateAll()andstore()operations. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided Office documents, creating a vulnerability surface if the underlying parsers are not fully hardened.
- Files:
scripts/office/validators/redlining.pyandscripts/office/helpers/simplify_redlines.pyuse the standardxml.etree.ElementTreemodule to parse XML content from potentially untrusted.docxor.xlsxfiles. This module is more susceptible to certain XML-based attacks than thedefusedxmllibrary used elsewhere in the skill. - [COMMAND_EXECUTION]: The skill executes several local system tools to perform its tasks.
- File:
scripts/office/soffice.pyexecutesgccto compile the socket shim. - File:
scripts/office/validators/redlining.pyexecutesgit diffviasubprocess.runto generate detailed comparisons between document versions.
Audit Metadata