xlsx

Warn

Audited by Gen Agent Trust Hub on Apr 13, 2026

Risk Level: MEDIUMCOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes external system commands to perform formula recalculations and manage environment compatibility.
  • scripts/recalc.py uses subprocess.run to call soffice (LibreOffice) with a custom macro URI to trigger recalculations on user-provided Excel files.
  • scripts/office/soffice.py invokes gcc to compile a C-based socket shim (lo_socket_shim.c) into a shared object file at runtime.
  • The compiled shim is injected into the LibreOffice process using the LD_PRELOAD environment variable to intercept and modify socket-related system calls, a technique used to bypass AF_UNIX restrictions in sandboxed environments.
  • [COMMAND_EXECUTION]: The skill implements persistent modifications to the local environment to support its features.
  • scripts/recalc.py writes a StarBasic macro (Module1.xba) to the LibreOffice user configuration directory (e.g., ~/.config/libreoffice/4/user/basic/Standard). This modification persists across different sessions and affects any document opened with the local LibreOffice installation.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 13, 2026, 04:39 PM
Security Audit — agent-trust-hub — xlsx