docx
Warn
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/office/soffice.pycontains embedded C source code that is compiled into a shared library at runtime usinggcc. The skill then injects this library into the LibreOffice (soffice) process via theLD_PRELOADenvironment variable to circumvent AF_UNIX socket restrictions in sandboxed environments. - [COMMAND_EXECUTION]: Multiple Python scripts, including
scripts/accept_changes.pyandscripts/office/validators/redlining.py, execute system-level commands such assofficeandgitusing thesubprocess.run()function to perform document conversions and content comparisons. - [EXTERNAL_DOWNLOADS]: The
SKILL.mdinstructions guide the user to download and install thedocxlibrary from the public NPM registry. - [PROMPT_INJECTION]: The skill represents an attack surface for indirect prompt injection because it ingests and processes untrusted Word documents using powerful system tools (
soffice,pandoc,git). Instructions embedded within a processed document could potentially target the AI agent or influence the execution of the document processing pipeline.
Audit Metadata