docx
Fail
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: HIGHCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The script
scripts/office/soffice.pyperforms runtime compilation of C source code into a shared library using thegcccompiler. This is a high-risk pattern for executing arbitrary code.\n- [DYNAMIC_EXECUTION]: The scriptscripts/office/soffice.pyuses theLD_PRELOADenvironment variable to inject the runtime-compiled library into the LibreOffice process, intercepting system calls such assocketandlisten.\n- [DYNAMIC_EXECUTION]: The scriptscripts/accept_changes.pydynamically creates a StarBasic macro and writes it to a configuration file in a temporary profile directory to be executed by LibreOffice.\n- [COMMAND_EXECUTION]: The skill makes extensive use ofsubprocess.runto call external binaries likegcc,soffice,pandoc, andpdftoppmwith arguments derived from script logic.
Recommendations
- AI detected serious security threats
Audit Metadata