docx
Fail
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: HIGHCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/office/soffice.pyexecutes thegcccompiler to create a shared library. - [COMMAND_EXECUTION]: The script
scripts/accept_changes.pyexecutes thesofficebinary to process document changes. - [COMMAND_EXECUTION]: The script
scripts/office/validators/redlining.pyexecutes thegitutility to generate word-level differences between document versions. - [REMOTE_CODE_EXECUTION]: The script
scripts/office/soffice.pyperforms runtime compilation and library injection. It writes hardcoded C source code to a temporary file, compiles it into a shared object (.so) file at runtime, and then loads this library into subsequent subprocesses using theLD_PRELOADenvironment variable to shim system calls related to Unix domain sockets.
Recommendations
- AI detected serious security threats
Audit Metadata