docx

Fail

Audited by Gen Agent Trust Hub on Apr 13, 2026

Risk Level: HIGHCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/office/soffice.py executes the gcc compiler to create a shared library.
  • [COMMAND_EXECUTION]: The script scripts/accept_changes.py executes the soffice binary to process document changes.
  • [COMMAND_EXECUTION]: The script scripts/office/validators/redlining.py executes the git utility to generate word-level differences between document versions.
  • [REMOTE_CODE_EXECUTION]: The script scripts/office/soffice.py performs runtime compilation and library injection. It writes hardcoded C source code to a temporary file, compiles it into a shared object (.so) file at runtime, and then loads this library into subsequent subprocesses using the LD_PRELOAD environment variable to shim system calls related to Unix domain sockets.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Apr 13, 2026, 04:39 PM
Security Audit — agent-trust-hub — docx