skills/npow/claude-skills/docx/Gen Agent Trust Hub

docx

Fail

Audited by Gen Agent Trust Hub on Aug 18, 2026

Risk Level: HIGHCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [DYNAMIC_EXECUTION]: The script scripts/office/soffice.py performs runtime compilation of C source code into a shared library using the gcc compiler. This is a high-risk pattern for executing arbitrary code.\n- [DYNAMIC_EXECUTION]: The script scripts/office/soffice.py uses the LD_PRELOAD environment variable to inject the runtime-compiled library into the LibreOffice process, intercepting system calls such as socket and listen.\n- [DYNAMIC_EXECUTION]: The script scripts/accept_changes.py dynamically creates a StarBasic macro and writes it to a configuration file in a temporary profile directory to be executed by LibreOffice.\n- [COMMAND_EXECUTION]: The skill makes extensive use of subprocess.run to call external binaries like gcc, soffice, pandoc, and pdftoppm with arguments derived from script logic.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Aug 18, 2026, 01:45 PM