docx
Warn
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill frequently executes external system binaries via
subprocess.run(). Notable instances include callingsofficefor document conversion,gitfor generating validation diffs, andgccfor compilation. - [DYNAMIC_EXECUTION]:
scripts/office/soffice.pycontains a C source string that is written to a temporary file and compiled at runtime usinggcc. The resulting shared object (.so) is injected into the LibreOffice process using theLD_PRELOADenvironment variable to shim socket communications. - [DYNAMIC_EXECUTION]:
scripts/accept_changes.pyprogrammatically generates a LibreOffice Basic macro and saves it to a temporary user profile. This macro is then executed via a specialized URI scheme (vnd.sun.star.script) to perform batch operations on documents. - [EXTERNAL_DOWNLOADS]: Documentation in
SKILL.mdinstructs the user or agent to install thedocxpackage globally from the NPM registry (npm install -g docx).
Audit Metadata