xlsx
Warn
Audited by Gen Agent Trust Hub on Apr 18, 2026
Risk Level: MEDIUMCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: Runtime Compilation and Library Injection: The script scripts/office/soffice.py contains hardcoded C source code designed to shim standard library socket functions. It compiles this code into a shared object using gcc at runtime and utilizes the LD_PRELOAD environment variable to inject it into the soffice process, facilitating communication in environments where standard AF_UNIX sockets are restricted.
- [COMMAND_EXECUTION]: System Command Execution: Multiple scripts utilize subprocess.run to invoke external binaries, including gcc for shim compilation, soffice for spreadsheet operations and formula recalculation, and git for content diffing during document validation.
Audit Metadata