docx

Warn

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: MEDIUMCOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill performs runtime compilation and library injection to facilitate its document converting and editing features.\n- scripts/office/soffice.py: Automatically generates a C source file in the temporary directory and compiles it into a shared object (lo_socket_shim.so) using gcc.\n- scripts/office/soffice.py: Loads the compiled shared object into the soffice (LibreOffice) process using the LD_PRELOAD environment variable to shim network socket functions.\n- scripts/accept_changes.py: Executes the soffice binary via subprocess.run to perform automated document edits (accepting tracked changes).\n- scripts/office/validators/redlining.py: Uses subprocess.run to call git for diffing extracted document text content during validation.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 13, 2026, 05:20 PM