xlsx
Warn
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The script
scripts/office/soffice.pyperforms dynamic code generation and runtime compilation. It writes a C source string to a temporary file (lo_socket_shim.c), compiles it into a shared library usinggcc, and then injects this library into the LibreOffice process using theLD_PRELOADenvironment variable to bypass environment-specific socket restrictions. - [COMMAND_EXECUTION]: The skill extensively uses
subprocess.runto interact with the host system. This includes executingsofficefor spreadsheet recalculation, invokinggccfor library compilation, and usinggitfor document diffing. These operations occur inscripts/recalc.py,scripts/office/soffice.py, andscripts/office/validators/redlining.py. - [SAFE]: The skill utilizes the
defusedxmllibrary when parsing XML components of Office documents (scripts/office/validators/base.py). This is a security best practice that protects the agent from XML External Entity (XXE) vulnerabilities when processing user-supplied files.
Audit Metadata