xlsx

Warn

Audited by Gen Agent Trust Hub on Apr 18, 2026

Risk Level: MEDIUMCOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: Runtime Compilation and Library Injection: The script scripts/office/soffice.py contains hardcoded C source code designed to shim standard library socket functions. It compiles this code into a shared object using gcc at runtime and utilizes the LD_PRELOAD environment variable to inject it into the soffice process, facilitating communication in environments where standard AF_UNIX sockets are restricted.
  • [COMMAND_EXECUTION]: System Command Execution: Multiple scripts utilize subprocess.run to invoke external binaries, including gcc for shim compilation, soffice for spreadsheet operations and formula recalculation, and git for content diffing during document validation.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 18, 2026, 02:18 AM