xlsx
Warn
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: MEDIUMCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes external system commands to perform formula recalculations and manage environment compatibility.
scripts/recalc.pyusessubprocess.runto callsoffice(LibreOffice) with a custom macro URI to trigger recalculations on user-provided Excel files.scripts/office/soffice.pyinvokesgccto compile a C-based socket shim (lo_socket_shim.c) into a shared object file at runtime.- The compiled shim is injected into the LibreOffice process using the
LD_PRELOADenvironment variable to intercept and modify socket-related system calls, a technique used to bypassAF_UNIXrestrictions in sandboxed environments. - [COMMAND_EXECUTION]: The skill implements persistent modifications to the local environment to support its features.
scripts/recalc.pywrites a StarBasic macro (Module1.xba) to the LibreOffice user configuration directory (e.g.,~/.config/libreoffice/4/user/basic/Standard). This modification persists across different sessions and affects any document opened with the local LibreOffice installation.
Audit Metadata