docx

Warn

Audited by Socket on Jul 10, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/office/soffice.py

The Python code orchestrates runtime compilation of a native shared object and injects it into soffice via LD_PRELOAD when AF_UNIX sockets are unavailable. The fragment lacks the C source and contains syntax truncation, preventing definitive behavioral analysis. The observed design (write-to-temp, runtime compile, LD_PRELOAD) is a significant security risk: it enables arbitrary native code to run inside a third-party process and is vulnerable to local tampering and privilege abuses. Treat this code as potentially dangerous until the omitted _SHIM_SOURCE is fully reviewed and the build/preload process is hardened (private temp dir, integrity checks, signed artifacts, sandboxing).

Confidence: 75%Severity: 68%
Audit Metadata
Analyzed At
Jul 10, 2026, 12:24 PM
Package URL
pkg:socket/skills-sh/MichaelTarasov02%2FSkills%2Fdocx%2F@dda08a3953561a4d362dd87c550f4f9b01aa39cc81a6b9666fcd00a823f89c2a
Security Audit — socket — docx